{0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:53 executing program 5:

14:24:53 executing program 4:

[  413.646307][T14562] ptrace attach of "/root/syz-executor.1"[14561] was attempted by "/root/syz-executor.1"[14562]
14:24:53 executing program 2:

14:24:53 executing program 1:
getpid()
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:53 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:53 executing program 4:
syz_emit_ethernet(0x5e, &(0x7f0000000440)={@broadcast=[0xff, 0x0], @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "84f208", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, [], @ipv4={[], [], @private}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0)

[  413.850231][T14574] ptrace attach of "/root/syz-executor.1"[14571] was attempted by "/root/syz-executor.1"[14574]
14:24:54 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:54 executing program 5:
write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x40}, 0xb)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000440)={0x18, 0x1, 0x0, {0x7ffdffff}}, 0x18)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1)
write$binfmt_script(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x191)
keyctl$set_timeout(0xf, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0)
close(r1)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000280)=0x4c)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x6cab0a3e, 0x100, 0x9, 0x0, 0x54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
exit_group(0x0)
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000380)=""/169)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000002c0)=r0)
setsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f00000004c0)={@dev={0xfe, 0x80, [], 0x2f}}, 0x14)

14:24:54 executing program 2:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000040)='K', 0x1}], 0x1, &(0x7f0000000580)=[@dstaddrv4={0x10, 0x84, 0x9, @remote={0xac, 0x14, 0x0}}], 0x10}, 0x0)

14:24:54 executing program 1:
getpid()
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:54 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:54 executing program 4:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
r1 = dup2(r0, r0)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f00000000c0)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@dstaddrv6={0x1c, 0x84, 0xa, @loopback}], 0x1c}, 0x0)
sendmsg$inet_sctp(r1, &(0x7f0000001b80)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x2}, 0x1c, 0x0}, 0x0)

[  414.622055][T14598] ptrace attach of "/root/syz-executor.1"[14597] was attempted by "/root/syz-executor.1"[14598]
14:24:54 executing program 0:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:54 executing program 5:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000080)={0x2, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='maps\x00')
preadv(r1, &(0x7f0000000140)=[{&(0x7f0000000200)=""/129, 0x81}], 0x1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x7, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map={0x18, 0x0, 0x2, 0x0, r0}, @exit]}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)

[  414.805944][T14609] ptrace attach of "/root/syz-executor.5"[14601] was attempted by "/root/syz-executor.5"[14609]
14:24:54 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:54 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:54 executing program 0:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  414.933457][T14623] ptrace attach of "/root/syz-executor.1"[14622] was attempted by "/root/syz-executor.1"[14623]
14:24:55 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:55 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:55 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:55 executing program 0:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:55 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:55 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

[  415.735066][T14655] ptrace attach of "/root/syz-executor.1"[14654] was attempted by "/root/syz-executor.1"[14655]
14:24:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:55 executing program 1:
getpid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

[  415.905204][T14666] ptrace attach of "/root/syz-executor.1"[14664] was attempted by "/root/syz-executor.1"[14666]
[  415.915559][T14665] binder: 14663:14665 ioctl c0306201 0 returned -14
14:24:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  416.013526][T14671] ptrace attach of "/root/syz-executor.1"[14669] was attempted by "/root/syz-executor.1"[14671]
[  416.145557][T14675] binder: 14672:14675 ioctl c0306201 0 returned -14
14:24:55 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:55 executing program 1:
getpid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  416.379136][T14686] ptrace attach of "/root/syz-executor.1"[14684] was attempted by "/root/syz-executor.1"[14686]
[  416.395295][T14685] binder: 14682:14685 ioctl c0306201 0 returned -14
14:24:56 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:56 executing program 1:
getpid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:56 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:56 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:56 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:56 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:57 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:57 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:57 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:58 executing program 5:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:58 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:58 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(0xffffffffffffffff)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:59 executing program 5 (fault-call:6 fault-nth:0):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:24:59 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:59 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, 0xffffffffffffffff)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:24:59 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:24:59 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:59 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:24:59 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

[  420.145747][T14839] FAULT_INJECTION: forcing a failure.
[  420.145747][T14839] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  420.161324][T14839] CPU: 1 PID: 14839 Comm: syz-executor.5 Not tainted 5.8.0-rc5-next-20200716-syzkaller #0
[  420.171220][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  420.181278][T14839] Call Trace:
[  420.184586][T14839]  dump_stack+0x18f/0x20d
[  420.188938][T14839]  should_fail.cold+0x5/0x14
[  420.193554][T14839]  __alloc_pages_nodemask+0x177/0x720
[  420.198944][T14839]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[  420.205712][T14839]  ? ima_match_policy+0x9d4/0x1390
[  420.210847][T14839]  ? __lockdep_free_key_range+0x110/0x110
[  420.216580][T14839]  ? kasan_save_stack+0x32/0x40
[  420.221440][T14839]  ? kasan_set_track+0x1c/0x30
[  420.226226][T14839]  alloc_pages_current+0x187/0x280
[  420.231417][T14839]  skb_page_frag_refill+0x281/0x590
[  420.236634][T14839]  sk_page_frag_refill+0x4a/0x1d0
[  420.241682][T14839]  __splice_segment.part.0.isra.0+0x45c/0x7d0
[  420.247778][T14839]  __skb_splice_bits.isra.0+0x194/0x780
[  420.253354][T14839]  skb_splice_bits+0x102/0x1a0
[  420.258134][T14839]  ? __skb_splice_bits.isra.0+0x780/0x780
[  420.263899][T14839]  ? __skb_ext_del+0x320/0x320
[  420.268682][T14839]  ? __lock_acquire+0x16e3/0x56e0
[  420.273757][T14839]  ? perf_trace_lock+0xeb/0x4a0
[  420.278622][T14839]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[  420.284622][T14839]  ? __lockdep_free_key_range+0x110/0x110
[  420.290398][T14839]  ? __mutex_lock+0x626/0x10d0
[  420.295201][T14839]  ? lock_acquire+0x1f1/0xad0
[  420.299953][T14839]  ? unix_stream_read_generic+0x33c/0x1ae0
[  420.305769][T14839]  ? find_held_lock+0x2d/0x110
[  420.310548][T14839]  ? unix_stream_read_generic+0x4ce/0x1ae0
[  420.316367][T14839]  ? lock_downgrade+0x820/0x820
[  420.321227][T14839]  ? do_raw_spin_lock+0x120/0x2b0
[  420.326257][T14839]  ? rwlock_bug.part.0+0x90/0x90
[  420.331211][T14839]  ? lock_acquire+0x1f1/0xad0
[  420.335896][T14839]  ? unix_stream_splice_actor+0x1b/0x180
[  420.341555][T14839]  ? do_raw_spin_unlock+0x171/0x230
[  420.346789][T14839]  unix_stream_read_generic+0x7ee/0x1ae0
[  420.352444][T14839]  ? unix_autobind+0x8f0/0x8f0
[  420.357236][T14839]  ? aa_file_perm+0x5e2/0x1100
[  420.362012][T14839]  ? aa_path_link+0x2f0/0x2f0
[  420.366721][T14839]  ? fsnotify+0x842/0xd20
[  420.371067][T14839]  unix_stream_splice_read+0x15c/0x1f0
[  420.376540][T14839]  ? unix_stream_read_generic+0x1ae0/0x1ae0
[  420.382439][T14839]  ? unix_ioctl+0x1a0/0x1a0
[  420.387028][T14839]  sock_splice_read+0xb6/0x120
[  420.391800][T14839]  ? unix_stream_read_generic+0x1ae0/0x1ae0
[  420.397705][T14839]  do_splice_to+0x11b/0x1f0
[  420.402210][T14839]  ? copy_overflow+0x30/0x30
[  420.406811][T14839]  do_splice+0x13fd/0x17a0
[  420.411295][T14839]  ? lock_is_held_type+0xb0/0xe0
[  420.416256][T14839]  ? splice_from_pipe+0x140/0x140
[  420.421295][T14839]  __x64_sys_splice+0x198/0x250
[  420.426164][T14839]  do_syscall_64+0x60/0xe0
[  420.430593][T14839]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  420.436490][T14839] RIP: 0033:0x45c1d9
[  420.440386][T14839] Code: Bad RIP value.
14:25:00 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:00 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

[  420.444455][T14839] RSP: 002b:00007f90782c0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  420.452872][T14839] RAX: ffffffffffffffda RBX: 0000000000031a00 RCX: 000000000045c1d9
[  420.460845][T14839] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003
[  420.468822][T14839] RBP: 00007f90782c0ca0 R08: 0000000000000001 R09: 0000000000000006
[  420.476800][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  420.484816][T14839] R13: 00007ffd7b94955f R14: 00007f90782c19c0 R15: 000000000078bf0c
14:25:00 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:00 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:00 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:00 executing program 5 (fault-call:6 fault-nth:1):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:01 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:01 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:01 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:01 executing program 2:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mknod(&(0x7f00000001c0)='./bus/file1\x00', 0xf4fd82361b7216c1, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000340)={0xe0000000, 0x1900, 0x0, 'queue1\x00', 0x4})
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x8}}, 0x24, 0x0)

14:25:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, 0x0, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:01 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x2, 0x6)

14:25:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1d8, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1d8, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:01 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x3, 0x6)

[  422.381603][T14897] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
14:25:02 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:02 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x1d8, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:02 executing program 2:
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)='$\x00\x00\x00O\x00\a', 0x7}], 0x1}, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x5, 0x800000003, 0x0)
bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r3, 0x0, &(0x7f0000000000))
close(r2)
socket$netlink(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000100)='wg2\x00', 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r8 = dup2(r7, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0)

14:25:02 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x300, 0x6)

14:25:02 executing program 4:
unshare(0x68020400)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0)
accept$unix(r3, &(0x7f0000000000), &(0x7f0000000080)=0x6e)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x4000)
shmat(0x0, &(0x7f0000ff0000/0xe000)=nil, 0x2000)
socket$inet6(0xa, 0x3, 0x3a)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xfffffcaa)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x990000, 0xfffffffa, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9a0901, 0x412dccac, [], @ptr=0x4}})
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
setsockopt$inet6_int(r1, 0x29, 0xd0, &(0x7f0000000280)=0x7e1, 0x4)

14:25:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

[  422.579330][T14935] IPVS: ftp: loaded support on port[0] = 21
14:25:02 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:02 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x900, 0x6)

14:25:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:02 executing program 5:
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r2, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0xf0, @media='eth\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r2, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}}, 0x4000010)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_aout(r4, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r3, 0x0, r10, 0x0, 0x1, 0x6)

14:25:03 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:03 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:03 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:03 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaeaae0d35b1004bb0860efcc91300000000000019078ac1e0001ac1414aa03009078030007384500000000000000002f0000ac1414aaac1414000d2f3c2b21ef82ef5921f717d93bf6e6ec889cef"], 0x0)

14:25:03 executing program 4:
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5d4f9af8, 0x40)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x3, 0x2}, @rumble})
write$evdev(r0, &(0x7f0000000040), 0x373)
r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x9, 0x109000)
ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000140)=[0xfffffff8, 0x7a98a2fc])
r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0xc0000)
splice(r3, 0x0, r7, 0x0, 0x80000001, 0x0)
setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010100}, @in6={0xa, 0x4e24, 0x8, @loopback, 0x400}, @in={0x2, 0x4e21, @loopback}], 0x3c)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000180)={0x6, 'ipvlan1\x00', {0x4}, 0x100})

14:25:03 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:03 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:03 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:03 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

[  423.785131][T10447] tipc: TX() has been purged, node left!
14:25:03 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:03 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:03 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:04 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:04 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:04 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
r3 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x8001, 0x42)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x8})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0xc12a, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r10, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014)
sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800917e", @ANYRES16=r10, @ANYBLOB="000229bd7000fbdbdf25020000000c0099007f000000ffffffff08003f00ff00000008000100ffffffff08006a00fbffffff08000c01080000000800260005000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040844)
splice(r0, 0x0, r6, 0x0, 0x1, 0x6)

14:25:04 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:04 executing program 2:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x2, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
ioctl$NBD_DO_IT(r1, 0xab03)
clone(0x200000000204a100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x20)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x1e)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:04 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:04 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:04 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x0, 0x0, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:05 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(0x0, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0)

14:25:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0)

14:25:06 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:06 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0)

14:25:06 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x1, 0xc)

14:25:06 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:06 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:06 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
pipe(&(0x7f0000000480)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000080)={<r7=>0x0, <r8=>0x0})
clock_gettime(0x0, &(0x7f0000000100)={<r9=>0x0, <r10=>0x0})
utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={{r7, r8/1000+60000}, {r9, r10/1000+60000}})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="59a407ff640237165d3fbf1d8db8f0c794aa614a359cc4f4f062b745ed5411c3f40cd78193573eac5c3c060682c93dd354d3a4fb1afb8980b3df538d9d8059064501242c9916c381f645708effaadb1cfe697e672e45bf40995495b28b62df17db", 0x61, 0x0)
keyctl$read(0xb, r12, &(0x7f0000000300)=""/147, 0x93)
write$binfmt_script(r11, 0x0, 0xfffffcaa)
splice(r0, 0x0, r11, 0x0, 0x1, 0x7)

14:25:06 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0)

14:25:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0)

14:25:06 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x0)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000), &(0x7f0000000200), 0x0)

14:25:07 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:07 executing program 1 (fault-call:9 fault-nth:0):
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:07 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

14:25:07 executing program 4:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000018c0)=""/246)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x17642c4)
r1 = dup2(r0, r0)
preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000019c0)=""/4096, 0x1000}], 0x1, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=<r2=>0x0)
clock_gettime(0x1, &(0x7f0000000100)={<r3=>0x0, <r4=>0x0})
timer_settime(r2, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {r3, r4+10000000}}, 0x0)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x400a053, r5, 0x0)

14:25:07 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket(0x22, 0x800, 0x4)
connect$netlink(r6, &(0x7f00000014c0)=@proc, 0xc)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_script(r10, 0x0, 0xfffffcaa)
bind(r7, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x1, 0x2, 0x1, 0x4}}, 0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r0, 0x0, r11, 0x0, 0x1, 0x6)

14:25:07 executing program 4:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(r2)
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, [], 0x4, 0x7})
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x60c, 0x70bd2c, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4000010)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="256b94507fb1"}, 0x14)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8000)
ioctl$VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x7)
r6 = socket(0x1, 0x1, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
pipe(&(0x7f00000002c0)={<r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x0)
splice(r8, 0x0, r10, 0x0, 0x80000001, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c000100ffffffffffffffff08000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESHEX=r10, @ANYBLOB="62cb65edbb6af359c7340d896e5ee796e24e93bfa333433995d4a7bec9e450cb21dcca3093624ec073dd8310ce41f1265791e16657c936580285a9474fd48d352ec7116c30209c3fcaf2585e4fa14549456d6de08744d39d2cee0e12fb926415"], 0x50}}, 0x0)

14:25:08 executing program 2:
pipe(&(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
openat$null(0xffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$caif_seqpacket(0x25, 0x5, 0x3)
pread64(r4, &(0x7f0000000180)=""/4096, 0x1000, 0x4)
fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(r0, 0x0, r2, 0x0, 0x100000, 0x0)

14:25:08 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

14:25:08 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r7, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x349}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40085}, 0x8000)
r8 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
pipe(&(0x7f0000000000))
splice(r0, 0x0, r0, 0x0, 0x1, 0x4)

14:25:08 executing program 2:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:09 executing program 2:
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0x101)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@ng={0x4, 0xc}, 0x2, 0x6)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000140)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/143, 0x8f}, {&(0x7f0000001280)}, {&(0x7f00000012c0)=""/107, 0x6b}, {&(0x7f0000001340)=""/15, 0xf}], 0x5, &(0x7f0000001400)=""/62, 0x3e}, 0x10040)
ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000001480)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null})
r0 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r1 = getegid()
fchown(r0, 0x0, r1)
r2 = syz_open_dev$vcsu(&(0x7f00000014c0)='/dev/vcsu#\x00', 0x6, 0x2)
bind$l2tp6(r2, &(0x7f0000001500)={0xa, 0x0, 0x7, @loopback, 0x1ff, 0x4}, 0x20)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000001540)={0x2, 0x34, "5d1a4a64fd9ad19d75c630c7a8689bc1a01e5fed9996c3e7c86f52baab375d295eba5da87dec3a0aeca989b0e16d24c2131ced70"})
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001580)={<r3=>0xffffffffffffffff, 0x4, 0x9, 0xffff})
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f00000015c0)={{0x7ff, 0x0, 0x5, 0x2}, 'syz1\x00', 0x28})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001980)='/dev/hwrng\x00', 0x400, 0x0)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000019c0)=@assoc_value={0x0, 0x7f}, 0x8)
syz_mount_image$cifs(&(0x7f0000001a00)='cifs\x00', &(0x7f0000001a40)='./file0\x00', 0x1, 0xa, &(0x7f0000002fc0)=[{&(0x7f0000001a80)="ed6e161ca15d279bae8dd296627f4f1b87147f9e7ee02d58b4ed596ff748c10fb72c4934923f941668f71c64e2f0f3c31a87d7", 0x33, 0x5}, {&(0x7f0000001ac0)="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", 0x1000, 0x9}, {&(0x7f0000002ac0)="00be66a65ad75ff7d5a8f4e6a4c4dfc17c36eb565f245b510d71ec0a533c274498d92b9b491707ba37be4990abf8797b400778e8de9184da51fc0f73ebabc40cf1e5448be3d9312f8b26d381298d995b1bc48811d41721eea84457c41d75764ec5432e00e31dc15bc29a5609f3", 0x6d, 0x1}, {&(0x7f0000002b40)="455ff6bcc9d80a98c6c5ea6b4493c50ee5d73c5438676a88c63a974a0b25ec9b1ffe9331aca8d6bee0885f8aacdc76235a2a4180f43528ce7e59680a14f0c764b00f61d43212c025e97d64dff671b8710de6513e4b16248a6006107dea232c4253a5ae82787c7ad26a904322b19ec25bda88172cc699a5b00208d97497aa0ed77a8afbaa2c4cc7d5e0cd851d7a3041c2efa9422155a085fbf6cbacf243b46753afb9fd14f6abd86c289dfe5005b023c190c0528a82f7d777a520cd8bee6b497ea34a0934224fa9e63bd12849ed", 0xcd}, {&(0x7f0000002c40)="3cdcccef9ab4bfe78b9ee2ece03a40ae97839acd5fd32bbb82de02ee01218a52aba84d34936c4dea905db6335931dace0e2e8bcc7ddd53ab7d348ec3f66dcd0637fc07dd7fc51df79b9ebfd3b5581fc0a0f004f67e258e24a909321bb323780c93b3b84564445a27c1090f15906c", 0x6e, 0x6}, {&(0x7f0000002cc0)="0fc9fc0ca66f1eba74161c621638f4c2f093574d227b5f261480b64517d3efb41c656e533b66c87ed9bda20e9f07ebe59273821341f03970baa59b81a9492d585577815c2d2fe27ab95debf26b1af0823a8095aaa0b4657c5cf7bc1c6338", 0x5e, 0x6db6}, {&(0x7f0000002d40)="80d1ce281a2a959570c591a7263f33acff1c1685d08d04f04343880d7b09970173287d95e031021ad582ea6e3a97e71bf139a0d67c7c5d9b72258ee57541e3b5e235943b47798fdc0a1712e2025d3f0e92765dffe475792b457885da74beed91ef245eb9270448bde4cc935bc6139e4869dd7923a7ccea71aa62827f78f002417ff241c97e9d519ae916357e21540a5c67cfd0b0292f942a888827a427d1705206319b5f81f27511af01ca510666db844c20b429dc225f0783586532f9b8b45f7bea3e0c516b3abf41510a7339", 0xcd, 0xdca}, {&(0x7f0000002e40)="916feaa56e6c31ba64efcd690002b1376d453fe60d3d90b6adcc1e10dce97fcf79ac3907b88705a4c8721c477d69485f04384d0f175952b2784afaa338b95d4d473433216b2f3d6bf946a4cd188ea9019b9a511b039776b3c34e3bfe5d63654f7c4b1645d9187db93dbc773496a2286ea04fda783e9f", 0x76, 0x100000000}, {&(0x7f0000002ec0)="ca958d2dd9a3a254e8c2066aee021fb10167978ff729247df210e1990a998b4f4e36530a4a7a2ca6371eb6a6b945134280a9583600656c582a42f01776dc97dd717d566cf538", 0x46, 0x3}, {&(0x7f0000002f40)="1ee5bc9be21519e6ded780024b201560272bfecfc8bd2c355915fdd3a88a841dbc065be87dff1ef72406af11d31f1bdb4202d091c8e3eb5b3d8fed1d7137144718358cabd0b930f3b583fd9e95f65a37dc3661c1016a51e6562bf704cdca2e3449d0ac6f62d0f95b8317ad19247eb8331b6c1e64c4738c89", 0x78}], 0x804002, &(0x7f00000030c0)='\x00')
r5 = syz_open_dev$audion(&(0x7f0000003100)='/dev/audio#\x00', 0x8, 0x2000)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003180)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f00000031c0)={0x1c, r6, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000003280)=0xf000)

14:25:10 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x0, 0x0)

14:25:10 executing program 4:
perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x4000000, 0x105182)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002e00)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0)
fcntl$dupfd(r2, 0x406, 0xffffffffffffffff)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)={0xb8, "058562a37fdc3a5e6f3cf02c1862aa54066e330f467d62cf4f5b428fd5d82245182a12361fbd4c478fd037f8a380dbf442142ff0e1363274f041eb553bc989166b54f7cb12dd295033d21e905c16df8a33d3760fe1066409792418644ac102a304a59c0a03deaf48cf5f53da6c9fc1688ae88f487e12e3515145b338722a60a7b758e1c377fc6dc623cce61312591a3651908b10349049cfc7165477bf7b2ae02df23a48eb692dd83eb1de4b41a23659dd719399f83d603e"})
ioctl$TIOCSCTTY(r6, 0x540e, 0x0)

14:25:10 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r6, 0x8004f50c, &(0x7f00000001c0))
ioctl$BLKPG(r2, 0x1269, &(0x7f0000000100)={0x5, 0x4, 0xd5, &(0x7f0000000300)="d2fd01f5b01fa068995396f46482c2ee0f7aab7405a9a2c86df53dcb73606b7230ef680f1837eca2d3d0e82f3809395c2c2f8ad3f80d7eb6c168dbdea79b875c8d5572874d287a5dd83d56edc67197a4a449cd109e7f584518daa6b6edf9e16adcc990b8b287e751755715b1fbf720ffee49b09225ba3d5e0fc95102d947dd8dcc8c066329e4a90a075e087b0d2fbe7c07728c679480aa091e3a4547a6efed7baa0cc492259de85c52eecf9ed02b1d913058795e68db28ee808939f087abf1e421c993bef9db2c2fa0b163dd566b7f54c509c39770"})
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000000000000cf0000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="700000002c00270d000000000bf928d6bba5ffc1", @ANYRES32=r7, @ANYBLOB="0000000000000000f2ff000009000100666c6f7700000000400002003c000b800800010006000000300002802c000100000009"], 0x70}}, 0x0)
r8 = socket(0x1000000010, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

14:25:10 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, 0x0, 0x0)

14:25:10 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x280002)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000080)=[r3], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@ipv4_getnetconf={0x1c, 0x52, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x10001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000}, 0x20000000)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x6)

[  431.382030][T15256] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  431.421635][T15256] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
14:25:11 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:11 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:11 executing program 4 (fault-call:7 fault-nth:0):
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  432.419509][T15249] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
14:25:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:13 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4, 0x0)

14:25:13 executing program 2:
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xa732})
r1 = socket$netlink(0x10, 0x3, 0x7)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000014000100000000000000000002000000", @ANYRES32=r6, @ANYBLOB="1400f5e5cf3b6ab6b6060003000000ff07000000279b4ec989baa724000200fc01000000000000000000000000000010c15aa406da893181c9a9a7e1905a775755056506ba06575a937d9dc404c7908c602d2ec2886137e51e9446d5fc7347e6ec1e106429ee2cef2e0176196909ec6359e877082ab87ba7fbb38530f9caab21a054e987a8572f7dd52b9a5730658edeb9bf72d8af296ecc99147bcad1724545551f87c2e651390bb0de17b2ca272ef351e271d0be2091caee46f704fb2267c6915e83c531f9db78fb422659c7163e0abc37b2efc033b9a6a7c6ae"], 0x40}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x81}, [@IFLA_MASTER={0x8, 0xd, r6}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0xc850}, 0x0)
open(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7, 0x0, @empty}})

14:25:13 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, 0x0, 0xfffffcaa)
setsockopt$inet6_udp_int(r5, 0x11, 0x66, &(0x7f0000000000)=0x3f, 0x4)
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f0000000000))
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="6ff600000000140001840d0001007564703a7303003100"/34], 0x28}}, 0x0)

14:25:13 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

[  434.399855][T15318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
14:25:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x12, 0x0)

14:25:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  434.485575][T15324] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
14:25:14 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0xb}}}, 0x24}}, 0x0)

[  434.563493][T15318] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  434.635090][T15318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
14:25:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1d, 0x0)

14:25:14 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)

[  434.691794][T15324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
14:25:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  434.765848][T15324] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
14:25:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3c, 0x0)

[  434.835071][T15324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
14:25:14 executing program 0:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83f, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000000), 0x0)
geteuid()
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"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"})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40081, 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000180)=0x7)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

14:25:14 executing program 2:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x42e}}, 0x4000000)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)

14:25:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  435.465301][T15380] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
14:25:15 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c, 0x0)

14:25:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:15 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
lseek(r1, 0x1e01, 0x2)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x20000)
ioctl$DRM_IOCTL_IRQ_BUSID(r4, 0xc0106403, &(0x7f0000000080)={0xfc3b, 0x0, 0x5, 0x7fff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0)='NLBL_CIPSOv4\x00')
sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x158, r9, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x94, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f82ded3}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3fd5cc0b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21bc68c2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c44d66a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c9af2f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ed99594}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4500228a}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x4c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a6f16ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e98}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4135}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ba1a323}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda79}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1da6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf50}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4880ad7c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6dde6b18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54dcba93}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8800}, 0x4000811)
sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r9, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000)

14:25:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x6a, 0x0)

14:25:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e, 0x0)

14:25:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb8, 0x0)

14:25:15 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r3, 0x0, 0x80000000, 0x8)
ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xf81, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0='bpq0\x00', 0x6, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
sendto$inet(r0, &(0x7f0000000140)="11", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), 0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvfrom$inet(r0, &(0x7f0000000200)=""/4084, 0xff4, 0x62, 0x0, 0x0)

14:25:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc0, 0x0)

14:25:15 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendmmsg$alg(r2, &(0x7f0000002b00)=[{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)="99", 0x1}], 0x1}], 0x1, 0x0)
r3 = dup2(r0, r2)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000))
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "1ba0f43e564e1571e6916d5aee7490cd"}]}}}}}}}, 0x0)

14:25:16 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:16 executing program 2:
syz_mount_image$tmpfs(&(0x7f0000000100)='tmpfs\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6d706fff44696e746572653d73746174eba25775a8962c36"])
lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000001640)='trusted.overlay.upper\x00', &(0x7f0000001680)={0x0, 0xfb, 0x1015, 0x4, 0x0, "8f70873f95491c6ee08ffabd3a756894", "5c708f9e3993e048d9d93e4d5ff4d8528245223a421490205dec64cbebf38d154ad1c18e9d9de55ecfab3e7892917413596f4ac739ae0430a5f9586197e0518259e198298976b145f2fde3a4be919831498b11c6f80947d719042121497200867879394b0cb8be0de32d3becc35cf520de108e156e59291510adb2862cef9e9efc260e8b88c96e288e9f55194ed40a7d826cf4fe9a6528355edaf7d51ee38297b170cbbc3af8e575438e1e0f850a2e6c6a85feee8e3c145c6ffd03f19494c3a2130d0ff5907ee3f3ee65ca33770c30d19f56bdfd77ef1009dde882a114e6a58904ede5cffee230adbe512a7e1588380e2a429c87d82e9f69e9ce5c80926a34416e26ffef3e77f505407deee4c53c5093c2fe58c2e8b90c41b3a6d95d9af7ca33a530d5b64cc4caae9e5e845b3f62d8b19c6265e1cc66e997a6c88e20e949d68d53b99fb5a4b67ceb1f7f91beaa5e178e04ea01f82d9681470fdaced549d44b299d88882cfabf06cf3402def99b6dce2d658db466d2d7db9f3bd92bd12b80769006d138f1ae568de3bdf1b98d5e799d1cad940be356aed969503a139295d94746860d5c62e51f62de9991c4f09b1727ebb088a83c3bc36c243d3acae2d6160d9c84e3894b6060b63238d1eac2a337c6ccc4d3ea4e51c21524664f547270ddfebdfd7b984489424b3ca2275c54b87908f6d74e0475e364f7f96270780970f243621f84bfdfefef4ef5515b27396bcfcbb90f545a3443aadae15093fbeac81b26256da964a9bd6a45f1de6c9c68036c687d42a03e480cab7c70db9d1cd04ffe0b55b03ce68ee7be2699d912e352d578ba5dcce802bc23854676a85af4fa53ad2974ff94883a8b0edf5b204e272dca2226cd6fbfc2ca408be064bb99cdc9ed298218fe261b5204b835ab4a7a52bd639f93d0ff5199729fb28632dd1553506daffbf6fd46be945908f4cb6634ded2232d0a91d197d3546b2cf77be2bab30d629c9e9f65ead3b4f4fad1505179278d3ecb37ecac13f8f7a48975c6e0ea5817b141d6c3f2d35e7217bfeaa4c4bb69a2477a5a802af27a32aab177a9179afc7a373a11b967a20b3e6dc9da3a888080fe139f5eaee71d724d1c044bbef2544dbbcd2e72dec71e49eab3269dc9461ac673f7f9ecc67c2aa7dc98cd7323d9610db14fa8f66d6b276f3d2b3d583ac1051b3159870c35974dc3bebd86281068359375bc09b92983cbd74033198b86f3963fba36a341ec73575671f398509301f9abc2259456ccfe44760e8f0b397fc240f50d2cc5da1e7b6408e7b8ed4fdc73d99a3b07392ce6899e063e291c9ea6b26fd3fdaf853e00e0fe3eec2bda5003a5350928a66e57a71959c4cd1471fb2c7ec0b44e7a31c9032c1950a58cd0990c297d4a520eb55c3ebde504a64d316c32b79978b6904e5d8457fdb6b521f0293bded74eff7b8ec1e08d87545f520c8f113bdc8b98915f26c1420fde4702daed177553635615213be3917069d2aed3368490dd16f1f394fa36b1b26c9badc94b03199b8d3750f5b7ea41146f301ee40a164a35b5c62a579fcebb6f9d53a22237baab3a0f8c239ce92cba572db3ae0c7c796c8f6ffe4588c2c87ddd001bea0efadb1aee8107d55dc9ae96d70114dc39892eff9e62af2f8e12996c3d8d83b90c7b151cde10440c381a8a5a61f3efa6df8628ee572b6fb3c296f8ce8c5a2ac46f924600a66927abd8fa3d946939cafa0b357151cd62d44acd3cc667dc240559f4d6b7c54c8aa277fd49c82a486b545dc17be4867b3badf2a1865b8f5758a459d36449480aeae6658c455bca16920fbe15bc8f70bca9712d8520937861dbc08c498871cceeeaed3430fe8bac15c4d341d42a3f909de1a2224c0de8f689680e5c2499166fe8f5c833c957ed091024845b976d0fbf823dd4b2aa76e2dcbc461ae1968d22b147b0ed013b110671c7ae0a1c7c5dbf3b2b38222b824ad1492da449b7f9ca6fcdb94b3c2db86789e7c7c8b44288d741f5e1627801c22345d93db399e1505c638f0d4fb15726fb7dc1dc7ab8c012463d1a37106acc196db2d81e20b076ceefee5e82cde8796deb19c4a6cc8e434ff586dd3f61a0caecc46d95eadb2d624a9e376bfd8f8868a1993b0bdeeab410937398f7ba5ab667511cc42d322f2441ad9defbd21b743e71f880ffa969581c0f77a16b91c08996ca48c265a0902beea0e1862c47ae54fe0842d39ed3c2fef3288750732813c641efe332ba5fcbb50a4dae154bcdbf0ef577e8bcbcefa30b53fc85651b0e79f8617914dafebbfc5457584d34be70e82b863748b0469311c992771a7c9fe3cdf424d27fd53164f0eb1e50a93d3129e814d446665dc42b300521cee7e5b4de4ab3fd028ee193b5462757d8d8cf0dc8218b26eb9ac6559496ed27eec66a79845d37a09f7f4b7ed5e2f1cdbf7cdf27729c33306b645280905d1cebcf3475c7ecd8113703b3669f7c4c1b79c3e2a0f755f4736fe939b5a4596ffb766eb799ed6cdacbf177b3a05799861a4c08ba88f7608ff66ee82dc76252022d603c8d58c47e9906b057d18579b55c059f0523e7abd2243b37267e2218f93d3fcc920806a2f274e301c1d4b9515124188e4083f3b53bc23b46268c75e73105019121fbe67d0f889e390ddda1a22269e8989a4129f5c9bce05125dec18c57dcf845b31144308907faf3e8308036545f1a8e2b0e274b7e82914724bb3a969db234f8610492471f440a39a514f5c65aac15c77b604ed4342adde092815f82960d8be0dea9d4b731a57cb5de49b8922a06350680c0e18ee4933d4b51afe657e9c684c9839b7081daf4ceeb651888f55ae4e89c887621516ca0aaecbd8c51d30bf78034073801ff1d7d848f821d97498f930e007c34f08ab257e04e512f8fbe2f45121b607c9c3c68672cc7f5c35b49545d198a4f3b6330f14d10ad8f197dcfd68e303a8e6d81bba1ec30da037d5770c6bc036476858eb68bfb0b6d1b559567300c7511b57a037f6ae728b067e2df590a23492c6b00f7c88873b700219edd4b0b7a85e8003bbcbbb64353ba99f834621c73bba927393d9bdede060336bbcf53f9435233158b715f5f44d4813a57658a5242cc72a6764060061e39822251c1d57955f0124ce08b5d5e3c8c46f57d700b8efa64d42e0368459f5d2ba40e8e805bb3e398ac110d50d54ce8b80fcb36d15b58c4e4e572c0ccaa79efd90551c2dca4255016b7746e2b0f9c109dad7baf101719335f690cc645da209894601a58732bd06cbaecd6e6ae74e7fa087fcd9c9e65911102c1884fa41ec8aba7983c5843fba67148d8bec503501902842460e5b8ea0be207f42d3f64e7b0155c1a13b911a0d0b222722c0062eb8147ec7310bbbd2eed4a488ddc4e71740f514610ee2f55216b279385a9b3c566519f241ee1a708929711198b1be7e79eeff18a7a28bc013daf5c405da12dec3000b1efc7e7f00d208811d192c70940bd119a8b0b0db03e969f63d3ee7e8cf34ff89447476fc403f44f51fe9a6376d6451a3e8db225b6f9c7e8773017e56243f14d9a4103d48eb4e4aace71c3aa4848cf67ee2fdcbaf5dd7f0d8dcd45ea0517dbee84297e2a478937404b178227c3326f2a79f1303edb21a624a5142e02d17d777f9d5e72a9d2ea9d3215734badc865831815355a2fa3f4882c25ea965cf8d17f1397870ca0b54d9ee08f0dc15ee0266000b3ff31a0b2c8b4e19c160f3c3f2e725534a4de37ab02a143eec29ea71c9b153371964da2a079dc63ff55b8fa687ae9db2c294bd44978a98e74b1e2c11cf4b6a3724cb3285f66ef20d74b97f8ada3898b10db8de7703cc7e9b2c0b6d32fd4682b1c2efb2d7d573d2cfd23970cca88ab944a5ae2eddd0948c9e8803eef66558bc3afa478d64d0f1f6ec549fec610229c986de927aa5a29163ba420675122fe12cf43ad87cfa3e2be37fd01875f1b97a8044c6f6a3420702fb1da0063cc2a751dfa18164bdffc2d029d405d6462a310809bb6c0f6adaee6a090898932217b171cc4ab315cf13a2e9e70dab18448feada27bc0150091010f4d5d010b5d6729934b6eec9ce8df8d5972fef746722f79efc2709e616ad0c0d9e1f830f522c572095f1af994cf26aad6e31dfecb99855591731f3bf153ea41060afd76c0edf8ae77438572c4559428351f1ac75d70a7c46d0dc927a6ada8d14972c138db78c76d8553aed73aef4709211d8a0c24ecc7361b65b0179f4fb6eaac3487757b0fd57e3e880cea5b3912430e74705d6e39f2b4ccb72af7be861feedfa620885065e6adaf028e12e811d3ab87d8727bf1d1853d530ed4af1b8577ccc46ad0098fc8909fc8a9429f477d2a72c71f9395b88ef0bf7a6db2415f760fd3e06c648bdab0db48e82acf2968e6bd9766cf27d0a17ea4656c64b715bf15dbb62ec96ce2ae5bdc91ce05809b9cdff66e701cdb1a56e5627ef571df986ac73068b4a9be06897e3561e91a3c71de9045f266fe970c5f07f442e988fc796c4e92013818f8813a7961eae8a99854961107dec93230e81d1de6ca1d8adb1c8f750ae1c715ae1898ac60de246dc1b869576061962b1ee74807a7f5efda9843a5629a49aa74fc4caacbf9625b5ed7466531f020b71033ed2e7578406819b426263f728aec9ce932303f46f77b702967aae6e586ce007d7c1059039a372a2359a0df921073718b3332c50169a58e1b03aa4902cf09f16803909c93194b6cf39d72255a23cb80f823d4a7e5463b3e1d56ba35b31ee35f31ae8aa0d10dd58098b8410330e6bda2734837f29192883ba8649d7eb9be7456c66e79fd676449c241f005d100769e21e6eb7e131fe79cff99e5d43ab35d6b51fa1b7afc1155f284c0fd687c3f2ca30788104e80831b6fbe243dc65d88c0afb8e3aa1583680f8d5469bd553722072c16433c4574378a158c7777f56ef26454b61cf49ab8265090a50c23233a183a538e5c040a1d89b1550ac42d12cc0d713cb863c7e620119ae56a8ad8aa4f82f62bb496f4cb1713ff83ed9c787bca57b7aa076436a2e7f3b40534a7d00543c82ef99f4958e4e7b698fdd6015e38e7d8c32dfd7da0200a0b1cdf5595ba535123af039166d303661ad19148474ec6846868983bee565dc75cb1fd5625cbecca2492c513d78214615e8010539370ca14bec8bf202e6529cd3fe4a16ceac3ea154b8e29446056370a9d301d8c61897d2043c78631b79f6a6ed28a454f30f95be41e93c9cfddc4dc46350970b1ae39d41613a5fbcad8298ee2f5ef7026c3d343a203a79a0cab81f5e21536051df0069d4b95922407309a21b7f33cfbe514d23f25c7b70e12cca662c01a0f6acd16dab3693c8f28ea9abb1c0e60733a4174307bb4dd458a2549ae31480b0a347dbf20f9a21e4c386c9ca402b1d1317a5efa2bed76ac1edd582ffce313b62811c6fd112765b56e5a187681509ced96738619a6c0d33183381a3a287c296c566bb69bfaec4371eacf377e85587bb672fb456e6d7e491f54f5816e2e95a4cec83226bdc0b2c250f293328ff7db280b85ba43ad44506c35223a3a63513a2b26d562cc60850cecd4557f814800e2da13d89d1119d3bec7540f587e558c475fb50dc852a5eb2f1f02f1f2fb7e5875ad541a8a1969ef3d14fcc1486f13102c10857e1b288b61420d60780e507b158f6d565f08570df5d79dc233c40ae2aebd319f802c95caf90ce2832308f82e379274161c843bca8f56e295ef86a0fad93b9f19d0216e7f4a8df4758d0e7ddf5f31a947985e9e3b04681bb94a627b98e2284a3be6bdf1c6ef8aefeb00d4e"}, 0x1015, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={<r1=>0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
rt_sigqueueinfo(r1, 0x10, &(0x7f0000002740)={0x20, 0x8, 0x7})
syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x7, &(0x7f0000001480)=[{&(0x7f0000000180)="d8ebc3dd2f387ca61a672e76c1b863dd72029e7d436607549303f48a0c333e7d064228e720d88aaf1ac70fea520279ed3b3eaf8f1f3b2a1e76d1036939334fd44302a4dfa6fa790804e1083424826a40813d3b102776dfe8a45a8980009c24bbb0", 0x61, 0x6}, {&(0x7f00000000c0), 0x0, 0x6}, {&(0x7f0000000200)="1ca6c60b1f9993682a1de568c492d2d0fb7ce6192d9a4720bc02d415e09bd0e7a8b313d00facfe78bc33ee111c70f216c2749edf213735b29d4d383aa0616d2574b9a1fbb77fd6f4bc724de218331f0adfbf79f87d5d15dbaac71554c0797cc53fa25e5ed393a9f17baf372b610b42b1169a", 0x72, 0xe7}, {&(0x7f0000000280)="751125bdfd512bbfca7a7828c8ccb90c3d804711983d3d8a5e5d44b21499040cbaad8061219c92a283d927a99c5b08825e67dbf333596e32c2828006f1723f12b37c71851802d83450a02ab6d0d4f8456b2fa959f666eafcf85b51dc6ae75512b8d425f103c9275850050f57ed3b76b556c90a64141ddd7c592cf78e26743301c58ad44549f2e33882a9c0a08aadd3c20a305ce1265390324a4c1d5ba2e4b24237f719cbd314ba269d4e3ae044f75092cef90baea38203fd25e854eba05a0c74f8db", 0xc2, 0x7}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="4173082983d322bb6bc3568a42588b95e71057112b08c48ec3ec3ecae0b3801ef2f84a621a9338d4c2148e332bf834d9aab7debae1be8086a784f688135c0bd04147e377000c899ca78d9b6f665c00ea51f3250f0a6a9ab10c5bafdbff4bce6d2d9ad6f1e2f92b9a9f8cb2e05886f5311573b6bef7b0d39f5eb995259ac65674a72870be540c6062", 0x88, 0x800}, {&(0x7f0000001440)="b7f5bcc32461216bb2ffb6db68d955402cbf12beef256874e4bd8e9564e596", 0x1f, 0x7}], 0x200008, &(0x7f0000001540)={[{@fault_injection={'fault_injection'}}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x3}}, {@acl='acl'}, {@acl='acl'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@uid_gt={'uid>', r2}}, {@obj_user={'obj_user', 0x3d, 'tmpfs\x00'}}, {@euid_gt={'euid>', r4}}, {@fsname={'fsname', 0x3d, ',}('}}]})

14:25:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc2, 0x0)

14:25:16 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0xf)
getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@private0, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r8=>0x0}, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="5f5e490fcb437ceb93a77dcddcb12a915292457fbc9d115097c569cad6190ed1efa9fad4fdc909975eef", @ANYRESHEX=r8, @ANYRES64])
fchown(0xffffffffffffffff, r7, r8)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r0, 0x0, r9, 0x0, 0x1, 0x6)

14:25:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xf6, 0x0)

14:25:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000000)={0x18, 0x70, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x46, 0x0, 0x0, @str='/^\v'}]}, 0x18}], 0x1}, 0x0)

14:25:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x10e, 0x0)

14:25:16 executing program 0:
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x30, 0x7, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe536}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000)='/dev/hidraw#\x00', 0x3, 0x519e00)
write$hidraw(r1, &(0x7f0000000100)="09c1d4fd8368b03a430d8563cab1d01944f10098c99dd4f494a186cbea7da60b2c993328af144156261935c831f520106d3bc9f578bc49d299090f7c87948585b9244de7ecb30d2d38f2dc981462a6d401d7149109294fce10dafa3b15c3fc7be80510c5d7e672df245b8c2627a55921bffdd5a8a1b0cb82c9667a127bcda5392169718cb303", 0x86)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4)

14:25:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x122, 0x0)

14:25:16 executing program 2:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="170000001600ff21c7617089ac5c54000a"], 0x2c}}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4014)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6172bd4f430ba54}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_MODES_OURS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x804)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x7fd}, 0x10)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924ba3, 0x0)

[  437.496384][T15519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  437.569222][T15526] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  437.970526][T15519] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  437.992054][T15526] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  438.003740][T15526] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  438.014055][T15519] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
[  438.023349][T15526] netlink: 'syz-executor.2': attribute type 2 has an invalid length.
14:25:17 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:17 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:17 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x125, 0x0)

14:25:17 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'sit0\x00', 0x0, 0x2, 0x8, 0xff, 0x20, 0x30, @ipv4={[], [], @local}, @mcast2, 0x20, 0x7, 0xc4, 0x1000}})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001140)={0x14, 0x0, 0x2, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r0, 0x0, r10, 0x0, 0x1, 0x6)

14:25:17 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000003000)={0x5, 0x80, 0xfffffff9, 0x6, 0x8, "7562c43caec2e61183beec2a7af1663de1a8fb", 0x2, 0x4})

14:25:17 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x138, 0x0)

[  438.179864][T15550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
14:25:17 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:17 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4)
mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0)
r2 = gettid()
r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
prctl$PR_SET_PTRACER(0x59616d61, r2)
write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c653020f014d336b04b03040000000045550800c1771332da4a8c7b94c26f028976957056ac00b04e9879498b3149595314f0771b65d33e129933dd93009f03cd0000e6ffffff000000000000000000000500"/103], 0x191)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
close(r3)
setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{}, {0x2}]}, 0x14, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)

14:25:17 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x142, 0x0)

14:25:18 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:18 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x148, 0x0)

14:25:18 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:19 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:19 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x154, 0x0)

14:25:19 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000003000)={0x5, 0x80, 0xfffffff9, 0x6, 0x8, "7562c43caec2e61183beec2a7af1663de1a8fb", 0x2, 0x4})

14:25:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:19 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000100)={0x8, 0x400, 0xaa, 0xba, &(0x7f00000001c0)=""/186, 0x49, &(0x7f0000000040)=""/73, 0xea, &(0x7f0000000280)=""/234})

14:25:19 executing program 0:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r3, 0x7fff, 0x800})
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="12000000300001"], 0x1}}, 0x0)
pipe(&(0x7f00000004c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
write$binfmt_misc(r10, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r9, 0x0, r5, 0x0, 0xffffffffffff8001, 0x0)
close(r6)
socket$netlink(0x10, 0x3, 0x0)
splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0xb)

14:25:19 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x15c, 0x0)

14:25:19 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev, @in6=@mcast1}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xffffffffffffffb2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r7, 0x0, 0xfffffcaa)
lseek(r7, 0x7, 0x4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r0, 0x0, r8, 0x0, 0x1, 0x6)

14:25:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:19 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x172, 0x0)

14:25:19 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x176, 0x0)

14:25:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:20 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:20 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x186, 0x0)

14:25:20 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:20 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000003000)={0x5, 0x80, 0xfffffff9, 0x6, 0x8, "7562c43caec2e61183beec2a7af1663de1a8fb", 0x2, 0x4})

14:25:20 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205000000b324502ff3a4412f5fd5bd6e0e7c9602b50dcfebad80697a6d5ec3221033002911931a25454fdd0dc0af002780342c3818995f7af7df9f8f8312c30443224eb87d3bc811b2abf2d58198b6f07206c8bb1d85d5a44b45ea6d58b9e61303d58fb377a001fbb14afe36b85b1c80d959fd4a2fa8cefc3120f3d7fc9cb625203a51dc1afa9fa86332d2605378c725da314028e66c868604656a8625d7fa79644c1c4baf99ef75876b38edc574c904e2d99c2210c9fc0b83e9d39b16ecea967cb096807713e43d27ee3e00"/216], 0x0}, 0x0)

14:25:20 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:20 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1b2, 0x0)

14:25:20 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mkdirat(r4, &(0x7f00000012c0)='./file0\x00', 0x6)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f00000011c0), 0x10)
write$binfmt_script(r5, 0x0, 0xfffffcaa)
getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x4, 0x1000, [], 0x3, &(0x7f0000000000)=[{}, {}, {}], &(0x7f00000001c0)=""/4096}, &(0x7f0000000080)=0x78)
accept4(0xffffffffffffffff, &(0x7f0000001300)=@phonet, &(0x7f0000001380)=0x80, 0x800)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x16)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, 0x0, 0xfffffcaa)
getsockopt$sock_buf(r8, 0x1, 0x3d, &(0x7f0000001200)=""/96, &(0x7f0000001280)=0x60)

14:25:20 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  440.845405][ T8748] usb 1-1: new high-speed USB device number 4 using dummy_hcd
14:25:20 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
write$P9_RWRITE(r3, &(0x7f0000000000)={0xb, 0x77, 0x1}, 0xb)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x7fff)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r0, 0x0, r9, 0x0, 0x1, 0x6)

14:25:20 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1b4, 0x0)

14:25:20 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  441.204830][ T8748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  441.242049][ T8748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.277752][ T8748] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40
[  441.304780][ T8748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  441.319895][ T8748] usb 1-1: config 0 descriptor??
14:25:21 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:21 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1b8, 0x0)

14:25:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:21 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000003000)={0x5, 0x80, 0xfffffff9, 0x6, 0x8, "7562c43caec2e61183beec2a7af1663de1a8fb", 0x2, 0x4})

[  441.674934][ T8748] usbhid 1-1:0.0: can't add hid device: -71
[  441.682252][ T8748] usbhid: probe of 1-1:0.0 failed with error -71
[  441.723441][ T8748] usb 1-1: USB disconnect, device number 4
[  442.334806][ T8748] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  442.694826][ T8748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.706164][ T8748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.717777][ T8748] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40
[  442.727513][ T8748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.737056][ T8748] usb 1-1: config 0 descriptor??
[  443.218210][ T8748] acrux 0003:1A34:F705.0005: hidraw0: USB HID v0.00 Device [HID 1a34:f705] on usb-dummy_hcd.0-1/input0
[  443.229397][ T8748] acrux 0003:1A34:F705.0005: no inputs found
[  443.245102][ T8748] acrux 0003:1A34:F705.0005: Failed to enable force feedback support, error: -19
[  443.417485][ T8748] usb 1-1: USB disconnect, device number 5
[  444.184822][ T3863] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  444.544864][ T3863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  444.559552][ T3863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  444.570594][ T3863] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40
[  444.580394][ T3863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.589906][ T3863] usb 1-1: config 0 descriptor??
14:25:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:24 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1c2, 0x0)

14:25:24 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffffffff)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xfffffcaa)
ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000100)={@bcast, @bcast, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @null]})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)

14:25:24 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, &(0x7f0000000100))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:24 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)

14:25:24 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1d0, 0x0)

[  444.824984][ T3863] usbhid 1-1:0.0: can't add hid device: -71
[  444.831057][ T3863] usbhid: probe of 1-1:0.0 failed with error -71
14:25:24 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000001c0)=""/157)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:25:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

[  444.897609][ T3863] usb 1-1: USB disconnect, device number 6
14:25:24 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x203, 0x0)

14:25:24 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x206, 0x0)

14:25:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0xffc99a3b}, &(0x7f0000000200), 0x0)

14:25:24 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x214, 0x0)

14:25:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

14:25:24 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x224, 0x0)

14:25:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

14:25:26 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:26 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x252, 0x0)

14:25:26 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0xffc99a3b}, &(0x7f0000000200), 0x0)

14:25:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)

14:25:26 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
ioctl$IMGETCOUNT(r7, 0x80044943, &(0x7f0000000000))

14:25:26 executing program 0:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4f16}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x2, [{}, {}]}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e0000002140003ffb383c600000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1b, 0x7, '/usr/sbin/cups-browsed\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, &(0x7f0000000380)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000080)=""/19, 0x13}], 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c080)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0)

14:25:26 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x25c, 0x0)

[  447.209712][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
14:25:26 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

14:25:26 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)

[  447.278316][T15901] device bridge1 entered promiscuous mode
[  447.311819][T15918] bridge1: port 1(veth0_virt_wifi) entered blocking state
14:25:26 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x27e, 0x0)

[  447.348497][T15918] bridge1: port 1(veth0_virt_wifi) entered disabled state
[  447.470118][T15918] device veth0_virt_wifi entered promiscuous mode
14:25:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0))
socket$alg(0x26, 0x5, 0x0)

14:25:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})
pipe(&(0x7f00000002c0))

[  447.584463][T15901] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
14:25:27 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:27 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

14:25:27 executing program 0:
r0 = getpgid(0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0x4f16}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x2, [{}, {}]}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9eec004688", @ANYRES16, @ANYBLOB="000426bd7000fbdbdf25050000002f00070073797374656d5f753a6f626a6563745f723a7379736c6f67645f696e697472635f657865635f743a73300000080005000a01010108000500ffffffff14000200fe8000000000000000000000000000301400020000000000000000000000ffff0a01010214000200fe88000000000000000000000000010108000500e0000002140003ffb383c600000d"], 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x80)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x1b, 0x7, '/usr/sbin/cups-browsed\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x5c}, 0x1, 0x0, 0x0, 0x50}, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x2, &(0x7f0000000380)=[{&(0x7f0000000400)=""/215, 0xd7}, {&(0x7f0000000080)=""/19, 0x13}], 0x2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2000c080)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r9, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r9}]}, 0x28}}, 0x0)

14:25:27 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x28c, 0x0)

14:25:27 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/214, 0xd6}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5, &(0x7f0000001580)=""/61, 0x3d}, 0x3ff}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000015c0)=""/170, 0xaa}], 0x1, &(0x7f00000016c0)=""/223, 0xdf}, 0x72}, {{&(0x7f00000017c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001840)=""/241, 0xf1}, {&(0x7f0000001940)=""/8, 0x8}, {&(0x7f0000001980)=""/143, 0x8f}, {&(0x7f0000001a40)=""/65, 0x41}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/178, 0xb2}, {&(0x7f0000002b80)=""/166, 0xa6}], 0x7, &(0x7f0000002cc0)=""/97, 0x61}, 0x50c5ea86}], 0x3, 0x400120a2, &(0x7f0000002e40)={r1, r2+60000000})

14:25:27 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0)
fsmount(r4, 0x1, 0x7b)
splice(r1, 0x0, r3, 0x0, 0x40001, 0x1)

14:25:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})
clock_gettime(0x0, &(0x7f0000002e00))

14:25:28 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2bc, 0x0)

14:25:28 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000000200), 0x0)

[  448.524168][T15963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  448.560215][T15963] device bridge2 entered promiscuous mode
14:25:28 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)
mount$9p_tcp(&(0x7f0000002e80)='127.0.0.1\x00', &(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)='9p\x00', 0x0, &(0x7f0000002f40)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose='cache=loose'}, {@uname={'uname', 0x3d, '(,'}}, {@loose='loose'}, {@debug={'debug', 0x3d, 0x1}}, {@noextend='noextend'}, {@version_u='version=9p2000.u'}, {@version_u='version=9p2000.u'}], [{@smackfsroot={'smackfsroot'}}]}})

14:25:28 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2de, 0x0)

[  448.741840][T15963] device veth0_virt_wifi left promiscuous mode
[  448.750012][T15963] bridge1: port 1(veth0_virt_wifi) entered disabled state
14:25:28 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

[  448.809387][T15963] bridge2: port 1(veth0_virt_wifi) entered blocking state
[  448.824016][T15963] bridge2: port 1(veth0_virt_wifi) entered disabled state
[  448.837562][T15963] device veth0_virt_wifi entered promiscuous mode
14:25:29 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:29 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2e6, 0x0)

14:25:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)
accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x1000)

14:25:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

14:25:29 executing program 0:
open(0x0, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{0x0}], 0x1}, 0x0)
getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0), &(0x7f0000000180)=0x4)
unshare(0x40000000)
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f00000000c0))
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000000)=0x7ff, 0x8)

14:25:29 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0)
write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC=r5, @ANYRESHEX=r2], 0xffffffffffffff03)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = dup(r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r0, 0x0, r9, 0x0, 0x1, 0x6)

[  449.721388][T16021] IPVS: ftp: loaded support on port[0] = 21
14:25:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:29 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x302, 0x0)

14:25:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000000200), 0x0)

14:25:29 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:29 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x30c, 0x0)

[  450.505962][T16021] IPVS: ftp: loaded support on port[0] = 21
[  450.716093][T10424] tipc: TX() has been purged, node left!
14:25:30 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:30 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

14:25:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:30 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x31a, 0x0)

14:25:30 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x604841, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_aout(r2, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000080)=0x5)
splice(r1, 0x0, r5, 0x0, 0x1, 0x6)
write$P9_RSTAT(r5, &(0x7f0000000100)={0x49, 0x7d, 0x2, {0x0, 0x42, 0x6, 0x0, {0x40, 0x3, 0x1}, 0x80080000, 0xa7, 0x5, 0x4965, 0x2, '[-', 0x0, '', 0x5, '/-\x84:!', 0x8, '!\\/[*/))'}}, 0x49)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x8, 0x98, 0x7, 0x40, 0x0, 0x7fffffff, 0x42808, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000001c0), 0x9}, 0xa00, 0xff, 0x3ff, 0x3, 0x5, 0x1, 0xfff}, 0x0, 0x5, r7, 0xa)

14:25:30 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x2, 0xfffffffffffffdcf, 0xbf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, 0xffffffffffffffff)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ttyS3\x00', 0x200000, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0xfffffcaa)
mq_timedreceive(r0, &(0x7f0000000200)=""/209, 0xd1, 0x1, &(0x7f0000000300)={0x77359400})
pselect6(0x40, &(0x7f0000000000)={0x9, 0xee9, 0x6, 0x2, 0x8000, 0x4, 0xfcd, 0xfffffffffffffffe}, &(0x7f0000000040)={0x2, 0x3, 0xdd7, 0x7, 0x80000004, 0xc, 0xffffffffbf4d79ec, 0x5}, &(0x7f0000000080)={0x7fff, 0x1, 0x4, 0x100000000, 0x9, 0x6, 0x1, 0x20000000000}, &(0x7f0000000140)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x2]}, 0x8})

14:25:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:30 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x33e, 0x0)

14:25:30 executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
poll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc508}, {r2, 0x8100}, {r4, 0x1000}], 0x3, 0x80)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r7, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, 0x0, 0xfffffcaa)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r9, 0x0, 0xfffffcaa)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r8, r9})
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1a7610}], 0x1)

14:25:30 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

14:25:30 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:30 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x340, 0x0)

14:25:31 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000000200), 0x0)

14:25:31 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x346, 0x0)

14:25:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:31 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
socket$alg(0x26, 0x5, 0x0)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[@ANYRESHEX=r2, @ANYRESHEX, @ANYRES32, @ANYRESOCT], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
r7 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair(0x0, 0x4, 0x2, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r9, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)
sendfile(r8, r9, 0x0, 0x2)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r0, 0x0, r10, 0x0, 0x1, 0x6)

14:25:31 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x362, 0x0)

14:25:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

14:25:31 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:31 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:31 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x37e, 0x0)

14:25:31 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

14:25:31 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x390, 0x0)

14:25:32 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:32 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x396, 0x0)

14:25:32 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:32 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000000200), 0x0)

14:25:32 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:32 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/60, 0x3c)
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:32 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3cd, 0x0)

14:25:32 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:33 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:33 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)

14:25:33 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

14:25:33 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1})
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x19f640}], 0x1)

14:25:33 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:33 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3d3, 0x0)

14:25:33 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:33 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff}, &(0x7f0000000200), 0x0)

14:25:33 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xfffffcaa)
connect(r3, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0x6, @remote, 0x8000}}}, 0x80)
r5 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r0, 0x0, r6, 0x0, 0x1, 0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00')
r9 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3f00}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x4000000)

14:25:33 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3e2, 0x0)

14:25:33 executing program 2:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xce, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x98, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}, @hopopts={0x11, 0x0, [], [@pad1]}]}}}}}}}, 0x0)

14:25:34 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b}, &(0x7f0000000200), 0x0)

14:25:34 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3f1, 0x0)

14:25:34 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r0, 0x0, r10, 0x0, 0x1, 0x6)

14:25:34 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3fd, 0x0)

14:25:34 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

14:25:34 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc99a3b00000000}, &(0x7f0000000200), 0x0)

14:25:34 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x602, 0x0)

14:25:34 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:34 executing program 0:
r0 = socket(0x1000000010, 0x80002, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x178, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x8010}, 0x40080c0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000ffffffe9e4ff280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)=ANY=[@ANYBLOB="3b0000002c00270d0000000000002000d0d1c77b", @ANYRES32=r3, @ANYBLOB="04c07b00753332"], 0x44}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0)

14:25:34 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

14:25:34 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc03, 0x0)

[  455.151147][T16336] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  455.188769][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
14:25:34 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)

14:25:34 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
fcntl$getflags(r1, 0x408)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1831fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x430d, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:34 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe01, 0x0)

[  455.328851][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
14:25:35 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap='nodevmap'}, {@access_user='access=user'}, {@access_user='access=user'}], [{@obj_type={'obj_type', 0x3d, '{!&'}}]}})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r0, 0x0, r8, 0x0, 0x1, 0x6)

14:25:35 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x88, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote, [@routing={0x2, 0xa, 0x1, 0x3, 0x0, [@local, @dev={0xfe, 0x80, [], 0x31}, @remote, @ipv4={[], [], @remote}, @loopback]}]}}}}}}}, 0x0)

14:25:35 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0xc2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:35 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1200, 0x0)

[  455.564909][T10424] tipc: TX() has been purged, node left!
14:25:35 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x80000001, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f000000dac0)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0xffffffc0, @mcast1, 0x400}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="eab5e27c9a50c483e31d989d26815995cebb6bef06fd926932c9c9241d8808f8de5e9a57ea054773d39764af070ab44099824d5816dc4679e5ed3258b58192152781d76b024398dca1daa9170cb62fd510d3d2c86d9ca76d21114d591ccaa5828d542be629a7c2b5ff43cfcd391e1d8911ac47f48c7e53a8d8aa2892184ace33440dd05a4dd675ee68a4cc3e309da6771755fcb1aa9ace2224e786b22fc23d11d9b2ec58ab6508df24c676c9ce2527c9f3fd5facf62c01c6402b5bc6991f5e52e1909e9d84020c683e722304e4a6996ce50bb7b50f368e6d95a3a72427b479e2df1cba548ab06a8777c7", 0xea}, {&(0x7f0000000300)="2e8808ebb786b0e1fed11719246035ed5735f0a178466d3d6fcfdda5ebe1519345069c52442dea8258821264bd0f21ff4b3214525e900bfe13e8f3dde13c8845f8988af30f023f0a5615eefaf0a005d1028bce85a330fa3008cc595f8948fe5faf19e63c328f98865aa66229bd9c778f057693d2ba8f64c0d2a00770d653b3ae49df65f5cba3e6528e1502c9699930b5b8e76e26a08948c7232db3a7cac22e295b2f24538955e5a67a1fd9d5bc5003d1577efa8e2641501a80bc0f554941bf37869ea5650b53f925241e6427f03d39e84c21f34bc9115be94436d0", 0xdb}, {&(0x7f0000000480)="4f38477f58d685f4dae1da3899a007e4c48cc6651e22647fca1540553b8ae05b8a844690f5526d51446f746e5982cab1314e5a8741902eed2dfcb50e35dfb4bce7cec9d8a155c9ae0b95008ae30d2dcb8424a7208e91eae253e9b50321fc0b1336d3055d2d36d9ecac87302b25cc1da69f89f9c939256b1f3e1567998c412edc4c02d074d27e5a6b9289f1fb5bc1bdc1a64dc09a049b1eae2ae94ade8a7fc25ac3f8e89b444f3daa9662523bd3d03afb713bb741bec490238eeb9a02e89a2e", 0xbf}], 0x3, &(0x7f0000000800)=[{0xb0, 0x114, 0x7, "12a0da2377afbc7057a52af457293f56c1b37ed35cb9002d8fcd60eeafecc1eede21a3a35e8adc082cfa90f17ca0e8da1ea8f6be775805d5329f92be9ed93ced0e7bcd0cd799067ac365a7e041b056c8a13e6c451461333e7d731e152a65e362792211938b4cc2586aa73fc5fdaa7853921ff894805776237b3fefdbe359fe7b4f603b7a56062d1cba32f366320da268c9553031af2bbe140699489f"}, {0x100, 0x10c, 0x0, "4ce83d49f12e775cf2b7a3edfc0581ce1102b5f1ab1c013de67fb3b0a264caa337c0154ac4c8a80259cea046a20f55ec545cec49c90930826b5d42478ee3590e2bfdeda2e049a8a94a4519b40dc34169d34135cec7d02ee50089fcd93b34e9a3c6397d24216f29a8f066fc9be9d88327c9a2ac8934c37ab2d0a1807e50f662622f94004a5dc5ae818dc85eb5755652a76a41fef79e77440ab6eaa3874227742f3f74fcd328db85c107ef94d93dfb3532c92acd4cba8c87bccf309d5d8e6f176ce02ecda3b46f2fab21f3b8c363d1ca12eb67be75fb38eb22c8dd7a835d327ccc78696f45514bc42890cf"}, {0x20, 0x109, 0x31dbf7a, "463b09d03af5be7691dc366b19"}, {0xc8, 0x116, 0x4, "827b423aaa9b369eebcb4c396d9e2d54db565393e3ded919b64c1c5f686d8932937cd915dff9cf5da98d3cdccd112734fd0de2eed72b1cf2e5858c5a4d5bc4b65f6b5834c78f8cd1d8d57012365aad4c3a330d67a1ed05e5967f8dca2bb58736ba1899b7d88fb4f91ba34b28ba5d8f2643c2ce3eca385facc5905a2042d813ee4bfd74e43ef4f32700bd609998b0e69109e928058e1b2d63df0d9f85d1a0e362de27c06570cbc8ff935d19906efcb5abf2a320"}, {0x30, 0x113, 0x7, "30eb29189a6ffb2d92635cf19900145b66c25ca61a17624e6777d8d3"}, {0x18, 0x29, 0x54, "03ef"}, {0x60, 0x10a, 0x8d, "eb9a20687d9ed6e77a76164f56f2b50e4f55804478989559d6be0cac7b75dbe5ea797098e0163f5e6c32011f85cbffd19383bec23317319b7c9ae2c39060b0360b09452cddff115692"}, {0x30, 0x103, 0xffffbc45, "51fe7d96af0347a9a225f507e9c38f785d0e3cdc7c5d3de8fe12beee42cc"}], 0x370}}, {{&(0x7f0000000540)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000005c0)="7ca038b752e94492cac9b37b7aa0af1707d469e21723d3a1af2532221948eb17c5889c9c7146d615a75cf150654b1ef6cc5f491264680978c0068a862917a5e587dff570f0f95ab5794680dd74944faa04bbbcc58668930f3412934d59ad9bb958f241e5e9baf7b589b1b969c6e8190f01c6ac828ebe9f6fc798b503c9f69d7e31dd89b02cf1aa7888e70b2aede4e595a527a7244dce744508e52ebb362082b204c5b0ef9a8b4d1c3990d6be66dd995be5b25bbba9f3b9e1c9657eebfe346e17e4ce83ebc3e751649c25946016e5a47632d68d39243b1a27cc02be38e3ce487e964a2b", 0xe3}], 0x1, &(0x7f0000000b80)=[{0x68, 0x10f, 0x1, "3d5b94f2b510c9e6fc3c91b7d2b1d0ccddecd7a48ee8759aabf7c213a747910ddd4cfde1448ec611a4f1feb0895c8e864324c64f68a37d20fc74dc928e727cb2a7515a7472e1590d7054a82c8472b3c0e4d144"}, {0xe0, 0x6, 0x100, "7d753bd910133c211413086cc49f43d21ae364678156e089d5e74801df4bcd92d9ad4b1a41a24a5390667042c352efeda72b2e298b8f2d43710faafb942a8a5b0e4af9dd1c0e468118753d92fdcd0eb4ddd6b8dd6e37deb39176f30f4756a61cb0446721a1899aa0a883fbec7dd97e40e7c25d8a2eb790792b229def018da93d701bd4f3840162313e3a93494e785fd03e979a542c0f0cb5903d1b59b0edf21e9effdac2c4e5dff575a41ea8a6f40f30fcc3d63caa31137cfce71bc15cb7a444538a9f1fefd62a65107d6e8723c4de"}, {0x28, 0x1, 0xfffffffc, "6544f0c19cd9c5fd61cb325786f57c9d93"}, {0x78, 0x84, 0xf6f5, "494cd0066a6c71c67ed21411f5c430a0c5ae73abc0cca64c1daef32bf957ceecdec684e7644f5bdaee4c467ea5298238fb1a6a1b2837e557624ae88b88795ffaec58c0a80e71e6ba0774418ef399a603779a3125accf6fe2ee3f6acd1669fbfa5ff51b07911db9b9"}], 0x1e8}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d80)="eee7a3094168f4f16074a3854d0b5b815029593c65b365f28d42ae6ee019ec570040c3d8a0b9f72b276f4ea4852075abdab92545be37325df576663fbfa1fb8451bd766cd790d06fa42263afca5d5032fc2f057bdc0f848d6b16ae1e91e59debf445616607c09025bb29220d8be2d6278e013512cf9e0968558570e1424e370ec2edd5cf9e28bf091b6f1028b151510e1e67a9ceac4d265c8b52fe3da0f02eced03ba4db04a3b73b384eb25677a3fa6a5fdb9788c21af251da84981a8f38bac06972dedc760d44f3d59e", 0xca}, {&(0x7f00000010c0)="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", 0x1000}, {&(0x7f0000000e80)="b3ed6aeb3b26c2265757f74c8043da6eb8f6570b1838c1a15284d526d3f2e45a08aae55e91a0586d5c0557ab296443feaf58802b9e6b55546867daf7570868de6465683fd4bd3d302192809962ff3d815f860a4e4976bc21cf817718e6c7bda2b5c32f9d424a781fc014fd1ef9c912429a0d9946473d4cc5852c49903f01003c265ff6d0de2e95a42b8b7afd4d5f4bd7248fb579da2251676538be2fd6a134339a4b313b732180716fba19d6a256ff4ebec464590921d8", 0xb7}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f0000000f40)="262ad89870ea2d8114610a2fc23b48b8b9d3fbd8ed37d2d739121c393c2a4465e2ed90b0d9c679bdf7cf28689b0d4073bd9ae34d6b85d62e67398ffa8221b1438c3b0b0c64a2553bb8ec63f7c9bae6427c8b83e9f54f8490bfb22eaa", 0x5c}, {&(0x7f0000000fc0)="63485e81f51aca61eaeea30a2b965adea321ed1be8ad001f12b6bc31673969de200dd18e8c9cdbae3d144896b16ae010acc1dc065aad0c60492f375ad979ab7f9661fb101accff0e2e79e6018f2b34f050030445e0c4a19ecf647b70b4ccf59398f6bb52", 0x64}, {&(0x7f00000030c0)="7c9a3df733c7ca58773248f8de70c2b11478f52868f1490ee8112bb767ea4a2562953168d0145f170bd7fa08dedd3e8e4a23c3db2910a2290f937b12982257cfcbcce234c4f56bb3b7f4fee71d18cf0395c3409f61e76dbb3875d17e65ef233351c164278e85afff1724ba01a095a9b59398dc584764d50dc0825953ab0b45b4d01f7d4675bbd075dc495b6b15162f5156798d1b1dd333047e0a7feb2ea16515cafa23f5d24cd606b6ffbd27612294fdc1aeeeaf0527e8d756b25ca5e7c122a4b18d481b21b170aa24842e4d0798bee1c4c44cbceae7fadfbcaaf815fc46ca68", 0xe0}, {&(0x7f00000031c0)="49e533e913a7be157fec2bee67b325df01cb56e6be83ec719ed9ac224f21e53f24dda80d9f2add56f870d8c47f16ed5281a1d6b2f50b73ad6a34e81207a2552aa6a7dbb1fc981397f0f945efd786bf304ad74a988be614491c73b52c3c72ab21df9e0f56edde2210a86c7f6dac7543c5952db93076b3f58124891cc7", 0x7c}, {&(0x7f0000000700)="25a3c59fc422efea7fc2137b1786ba33d7d375638adb84f392adcfff18f1a2e4ee43ecca8e47f9ac5ba8", 0x2a}, {&(0x7f0000003240)="2b371cac409dc720a9d20374330385015dd36ada984adf0e7bbd37de7ac31cd938ec030c402f0f771a6c99ec4dd83be90dbab97d1718a034284a134c40f25347f9d318c7d815a3d322edb1c03a596c3b141d7cb1b0b4b4a2e12139357cfff2964ef8c4", 0x63}], 0xa, &(0x7f0000003380)=[{0x108, 0x105, 0x4, "4f52a1c8e92c61b0c561a5da8d8787ad4161d8a1708b1612ebc037aee4850db472bd2a35e8320bb6c3a1cd4fb4c5e1f57350d28c858020863193f90fa80bc545fe0600a632da037e89dbea188efc3756ca0bd62691936a04ea86d4dd6320b260ea46b33af85df812a7a8fcee60954ccedc10bb528d940fadac341aa1e7ac5ea07a1bec9ba8e7d47b95b37efb708a0d8d631466bf18548ff49eda75bef4cb6f812ef819517135097bd89ed1ea914cd2899621130a3c7fb89a47f18eb54469e74f2bf9512b9ac5de0f8f3f269a8de381f17ca59711c47cedaef4aba467f84b37071719505e3c93e619af6b481dd55089be918eab97ce"}, {0x78, 0x10b, 0x6, "0860481cba11f7c9ce1d4d33177fb90904b7fd4051cd1114390777be4ac14fa92b5ecfaaf3c322fcc0376fef85b67c44ef783709e71fd02deb736d9ae34cfb8f4afaffcd1b72b86a332eefa879fbd3f92df824e6017188c0c101754d88f13b1e8778b04bfb"}, {0x50, 0x102, 0x4, "e53276d79834dccf0fed1e1b56672348a85370313a62f968460c45c0cc0b9b2c9b3627394c3773f2806061aafd9b6f26b74aff0e35455d27aa7dd2"}, {0x78, 0x103, 0x6aa6cfc4, "7f2ece1ff574ae136a4fc046b7d0db44db8a317150c9bf816d0a5ed124a0fe4fba9382d1d3698dfb73946094dafe8f0a35a7a1064d7fa9ae633f34c691fc04b490ebb3e07c205a51e791fc6943e2ae92647658ca1ce880f79df564555dea206fe43ab63a81ef"}, {0x98, 0x88, 0x0, "1bc3fe3d1496a3fe7797830967f51eaee82f29de22b7590cf5e9ba9cd4720e0daca316e23f91de43be3e780f3a20b8aa1d0d3fee02c9497f9aecd02dd3388623a74fda0f79e860e85052bb861b4c8bcb6776c0535bef58efa10c8167e885d28fec6b0b2c043e1ba443bec0e21aef779f3fd0741660729a3d28df7e117670093b4cc28c97"}, {0x18, 0x29, 0x3ff, "a79e4e"}, {0x20, 0x0, 0xfffffffa, "763d0d282abc7f8ac07cef7a"}], 0x318}}, {{&(0x7f00000036c0)=@hci={0x1f, 0x4, 0x3}, 0x80, &(0x7f0000003740)=[{&(0x7f0000001040)="7579e56e127d425e771a5e88", 0xc}], 0x1, &(0x7f0000003780)=[{0x110, 0x0, 0x3, "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"}, {0x30, 0x104, 0x1, "6cbe407ed3d90b5669fa3a8b6e5109224e190803622d85ad5a4e"}, {0x18, 0x103, 0x7fffffff, "76d30bc656d7ce"}], 0x158}}, {{&(0x7f0000003900)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x9d8, @dev={0xfe, 0x80, [], 0x40}, 0xc0000}}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000003980)="6a73265fcb4f714550fa6f65d0e902ebc5cbb9872ce53c567cbd6371dfbd44f5405f24489d0fc5f0c1185528287f915cc1e02f26c05ca3bec7164d7dd3a18a6c2be3cb4ef5f0575d79b32500c4a3e1a5e33fb2f7979a91f7", 0x58}, {&(0x7f0000003a00)="6b9905f83b7588a6ce11580e05abf557243f585b1acf64e42db0171646855d58544d059fc2d29fc848797cffeb077c46700ceff3499589bde4074eb930e07550272c0a8c0e8251c5cff7339daf15533fe3dc96112651f74594e59817f1a1851947ff6e0efd0748796942746ccdfbd0", 0x6f}, {&(0x7f0000003a80)="3badd817ce3dd29cccd83ebc23a9b60af88677de1e53002e03c5d27ae278a56758f2d6fe3892316fbe6c3ba1fd5f0f51879ce13ce98ff090d634b467b9a7d85858ae28f6dc3c1943b458174cf5bd0bafa93e07f9d35188574e7c82e66ce02ca1dde1a54608c395f4bdcd1b7300edad446367badf7d2aa5426e18f3959b2d3dfd782b8172305d332e3ed70fea31f1aa8d579d9077ea74fa3f89c2f170aa5b4874", 0xa0}, {&(0x7f0000003b40)="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", 0x1000}], 0x4, &(0x7f0000004b80)=[{0xa8, 0x116, 0x39e5531d, "c19c429bac50d5348ce1340b4516f6e2cc15210875e1c396b68bc373bc4b3d4638902baecb70dbbc57e6fd14543436fff74a6f317c2bf4706a4ffe7dcbf67f82e3b42db166155f56c3333ad10ee06bb178c7635b6f536c9e3561a96b986e7fbbe55bce0543ed9d339a568c76de1a35c362d2878f2af218b2c49a0720a7244db58894a721ae58f432a96f36df02e779cef95be884b5ff"}, {0x10, 0x118, 0x6}, {0x50, 0x105, 0x100, "8e1cb6b9c78098a123896de9cc3577ac97d6928dc0c2cb84552fa40cc2b18c691a8780444f97b3488962a5c433841ea4aa30451a9f8343bbbbdf523c9b9f2d"}, {0x70, 0x0, 0x78d259ee, "0fb96a67017a2bee67694edd0ac2229850cfc52b0510825955d74e9ab5008637d51219af5554d2a1e87bc9aa39f4ebebdbe9f751624b051b0a0a14d9aa6a7d2caccd9003e88985089826a671175eb6c2c6095403f05b0acdd5ae0b1e7df5eb"}, {0x1010, 0x2c298f8c6c6f8a6f, 0x40, "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"}, {0xa8, 0x117, 0x1, "9254981b18d2ab468ddbc69130e399a0517baa619a4624e4fb55835f84af165c3462423899666de3629d314ab9d20d34648ebf4cdd61ac1a9b28721d74b88edfd29a313c60a8c3ccd864734c8787e359ce32acb3b775c92d3bc494d44cc4d4890867d7856eee0fc943131652030e7fc7dcebe5b11e904147ea44fa04c9abaf91519a642558e2d72ed6c7bd8537ffaba402278f8bc2"}, {0x28, 0x29, 0x1, "a38f0a2c0a9fa9f5cdae85ee62afa3395b"}], 0x1258}}, {{0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005e00)="57fab07d9d6b5d3bf366d04a410a16bdd700dbde3af265c70007c0a8fc56f0fa4477656b36ef029c9b761390a8128b9ec67125c65c39dda310c6d3fc6b1561c3863f61df46678c5f31578c97a69b76b9e8a51d1f69d668a53d23646444d44ed66ff9e92e7907bab4acb38091031e0fd8e7da85cab4445aa96d620118f1170a461f91694b17b28c2abfacf1a7f7c385ae342adadc99ad3b699b554ea27c95083db9f8d024df49a6a782b823cb4ce973b6c431f2f68db1025235c060bfb47a1c5aecc7", 0xc2}, {&(0x7f0000005f00)="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", 0x1000}, {&(0x7f0000006f00)}, {&(0x7f0000006f40)="637ce2327d0de9af9d088396a3a5247581ca1b71ee24c8d746039ade3c6f6727990cf6e59a0bfb98d481e8c7a196d5", 0x2f}, {&(0x7f0000006f80)="0c362de320ee34c8c26c0a8f989fe1fd108c5cbf002727b80bb238512db4b0059c6f937755b2e515e364955084b7c37079db935a3783f179096729ccf7330f9a345a57af31937978e0a29a4819d48297ed3dbbdeca5a0205f2", 0x59}, {&(0x7f0000007000)="239f26a8b7eeda4df55eda4ac962e3e98406f3ef7ed78977f3804956cd31c3b5604f21b4687ca0bc4a077e1085f424ecb5738fc4", 0x34}, {&(0x7f0000007040)="46d346d1d2e34aa0e34b475ca41263c67156512ec719401d3af804d9", 0x1c}], 0x7, &(0x7f0000007100)=[{0x60, 0x10b, 0x6d7d3ddb, "964f24640f80a3b4802e6e2b47fd72528a00b2f38f27b7325486454cc7bacb638bf657ce7330ca6a1b9d685a709381a0743ecfb95c4d30b707f602eaa12ee67fab64436c0e279a1a394b"}, {0x78, 0x102, 0x7fff, "561dd8863e7227c83fbc0621c2c02e9cd6936b7219f29ca5f6b694b8001d9665390f58dbb38c61cdc280eca224f663ed222df25248941413f2cdab4d553aca0e03b57bbce9a4b0decf3546280403c5881c97b34075fbfd260983fbd087c6da4d2f60fb"}, {0x28, 0x29, 0x42, "73f3748d49ee45c3fcff8927b32f5d41de"}, {0xd8, 0x100, 0x1, "26fad474b7e80366f44e82ba06ac44a5643a3ff7a3f3de3999a6be556765291ba556c5206b9553c5fa57fa21174f263c061b39801e6df8505aae23382e35c39f381cd5dc3c8c994546c51fa059d2aaf9bb5c67f4dfa7506d7c1d0a86ce6b1b96a9f788b157119059e9475b8ba0fea00098fd90e09abdb9dbd253467bbb9048c2ba60ad045eeb84c9aaaf16a5a18a4521ef832eac70cca459290e183d671d6f122782dcc8f4dd69d3ed954b1ab4fbd9b86586ad1f8f386e0af594e91e96eb6cff03d9317629ffd6c6"}, {0x18, 0x114, 0x1f, "2aed4028"}], 0x1f0}}, {{&(0x7f0000007300)=@sco, 0x80, &(0x7f0000009580)=[{&(0x7f0000007380)="48dc79bf6313c4912b68216fd62116281bf07702edfcdbb615e579d29633e37e6260f1ba578091c89a404bf8333606e1d89fcfbaeef66de982a65a2d55fb943f8734567d3da79c7d8f425c5a55a7f22fceb9a0b4ec21f7be0c5a7039038eb8a6d883879c7e7e457f9ad8abbef9c9ec5562a8220e5e7c90e7a96ae7b577bc5c82cdbd460e6f69ae9a57028ba88d16c0c08211b8a635bed2e7ae33f00b493650bd629f603d713a09417f8e782ee3d3c26d543d2c161dd950effcdd606deed0184752a2dc3b36bff7916888d1e9bde450f73b3916249470caef7fed499b7a851ca9f3bc472952a856940384cda836e8dece5b21d97f1caf4d60f8724b834ee101846415a00180ab9a63de2e49a765c05ef2acde42b2cfbcef781e8c35e4f0c2c33a1f7ede9930e04f244b29f96ba0428139b92d6ef470d23d7a6c4b1e1b2d7a5e0ae59e27eb52a136e3e57fcc63b051cc1b06628186de39827fe73aa80596ea69ab22df2d9329796ae603cf576fc22b41e8041a62278babcf6bf61075f48720c4c1c91991267452ca13a1b0172b5bdbf69c7970b02447090f6cf0be68b4c4336d86e1eda70b6c3016cc08c58217474f52893e810c598ecce82d79adc33bcd1bef984990c9c55b639f6f9055b00a66a92d7f3b314a2ca8b3dd011837f4ed7f66dcd9a9934aa67e7eb7267b20ebe99c1383ad898d79010424fb9c0fbf15166bf1498cd2ba0c5e49c75e63069afd90a53d652f30d4e2455aaab9b2a1454bb8b98c423bbba1bbab86bc513a92d2870f9c5549715aaeb74ca425753842e115666ba31bb2afe32c45ba925889fdb1ddfafbef1e450f0f8b67139c8dc887962df80aa2df15f87f21e599a3caade809aa7e26ac12849b99e21b9005307fcc7da2eea3a6a9a348f5d5b9a81d746aac4208a82a8e029d6098d47f1ce23c4db9fbdd6d27ef1a7ed0cfeeedcce3869eae4d19bd5cb7623b4081a2932d64ef222779fe86a500f62a0dc51e8ad7d34b8205256cbd05ba7051406c9e2742ec4a49da780b27c6c32bfa3c823fb996574e3403a3df82033f275eeb613a8065506665596b2b3420ecd1e64ceacbeb3b0e667a2a87edf8e92e5e9ec9ffd02a379ab75a416608eb61bd85b7d20d0f1804513c223b722f089d0a847e74d1c5501b50abd028dc6e0294b9fe3c2ea1d809f4fab979bd0f8a4b4e497177d3896249f408f351fb48342bdcfc74825baf110c12ae006bf6d03d92b868958cf33a31f1a1891be83a1eed9a41eae73103793313fce0297ba9c5e8423024df63d1b7ea458ce698e0b5cb5e36238999e73b8884272153c522cc855f8dbef40a20e05255cd264e636ed95752afa8c562841a6d15cc0c974af2f27fe8c1b1e6e8fa4570edaa36a73e42927a19f4dec97b3a6bd293137a0cffecf9f1a46603bd5fa56beca786c3a5c33ef36c58a4b570c5084c926da6b17b1d6e2bdb82738473760f67594359b8233bdf28eec2ba14d8c6a82f92c52b8dd70947b0f1706e958e3dc0e91c3ab8cbe15354592f60ae6f79e42d11bf7843cfd27727f113c50a16186788caa8a3dd2ef096c838d226f53c98d64431e0e7ac10536bf9ecf9d8da69412ca4573df56bb6cc61a1b14189f71ffba4502dafe5b7adf2c4aebbc22d8af08a5c42e0bac6d73871186c5cbf2b54e64bd78f46fefda5d8e56f959192c55a2541cea8f7c6ef98c3af1b4cb8fa7e69309e09039f0237ef71f1fc4b7783d5795cbb4afe1efd89a6d13d171670946d8c675a8a31ef1a2996c7aa12eb849b234482e066dcd33f51aff5b759b8e8d75ecc551e3b2f755ada736a4944728c0c2ab45b18ab068aef259a0aa09e44e72a6228747a9e83d485e41b2c04a6410495acc77484290715ceba0717d820e3c0bb183731c189794328d6d010191656f839b263ee96d7cf8f4b40dd943538d0921d48e6f7e7feb3729693deeb946bc15025cb0f249b369f44010a1f46c7aeac5ff4e43997eef9ffb26755f9bdf2ee9c14e04a2602a47a1822f300010859c3ec8a2ac5c244efc78ae4b8c4bbd2f2ead57ce70a7a9e58c3ab18a947f1adcc366bddc6bea1569ac42a5808d30246c31b121df68d37d2c52afd3dd1f3d8798dd93669651e166444ed4e7852108586fbb8c1db58d69eb146be5ce9d960b57c5f8bc7b6e2d147cd1bc7a26457667302bbd9263d47651dc0603f1c82cb2800c2cdb81ec9debcd27abd9dc674a0bb3232549390c4d0eb130e5c75e3f3c22f1bc26b4639bc1e898a91f0bf95d9a8e1341416c41ad564211cf49167f466eaaf9976d35809c350dd68d4b39e2461fcf2f159b1a463ac1590cd5a6df6650cb6ef4c02277494af12dfdfe8ea436532092c97f6500f5e9dcf627ac7d4afe21bec2021db104647cc748fba9fe6d28bd89a37d0d48080b4005034dbdaab7792328795f3ac69bb23a8a2dd4712749cf48bff55574518c52264b6a027e3833e1c684d7489cea765cc53a6eeac32761557ad2389a1cb3d3c95f897f00ea1c186cd093e2a49f79f67158007adbcea88d5045ae67e399aebf51d5a7b3cf7899cc4be6954ef2a221e089220bcb195bbca63de1fb9bb99f1bf1930a29f57188dc4bcbcc4fd468c6f4a6b0324315d536e998e65fe1d58f7c5d456cad4e0630c6bf7cc92d42b58d6eb6dceacf13430773a30c1dc4f405e1ae3bb45e416ed0539807fba29138797fd91f7f68c8e0e3e0548f8f1cbebf0d11c50a86979295cda546411f15833ec1044701734cf1ab606943b514ef20bf2bd303af1673e817ed87d5077b561d71877cb060c5013d149372cc3d85fea28c6658187182a0b4873b101e24913e1f5961f9b1ff3c5251749f03815dc82f183be47317bbc4479ad9eccf051ad8f384aae2592fa8e2ac6bfbe5934fd694b6a86cdfafc3ce274e3fc8b814b14ad34eeada1d82b05d156d3e4181d93914dc71cc73c5636ee3d302589adf3835be5c7a1b012923427cbf68395c0b6bc5c7b12340ed483cd87280b465cfbd00f9a2cf5773e5ed3d556519c0cada5273027329a31e93b9e5b92c5940cf45651f1d7794c43a7774021e79cd90fc2d2c07ff61d462ec9cebac9522488ba5d79214c62bddce58e1b0b948896e22697b3e66b4423a7cb001521255b343109343bd2fb26a246b4ddbb8c340392fb2b8f5ee6ac31ef9b175eca09d17dab70fc2962169199b93e6ba0181367a9fbacda1e285299eb26ae46ea222e15ec2f5262f579c3b70dc5bf9edea4df2242c20410ed3c586cd7233967d2817ef9127b422b17f49933e075fb7ef11cc0a765f7051c86d9d394bfb1a1bfed02f91d44cbf4bb8985400017d0692f6a3bc525dd530a84cb775a26fa713d75c439b45d726361ee1a85cf577de3481b73381e7a6cef3d8c4d09b7ba986f304f5ebd976dc04c6ff788ea9db1cdecf10385d966c0799a58b5c9a5ec0dbc3a586bfd631132e001cc7bae1aea4e44b3d90a2b0f5b2a13bd27acecbbcc90e6f022da02e712d169de61b606fabf516311b57bf658ec0d932ae0223e65b20d2be77f95f43bd570ef497611189497662ceb18af9ff5c89ac97337fe0b67675e8a8b85295c723563101274d636f97db7abdd7ee232fb679e2c20ff6c19fb0eff095cb7cb919bd41914aa01858fc5baa9e48c8510804a4d8505628e14744f215c0c3f5f2445579d48bf90034d9038dbb6ddd39297550c9e191109f00b0479bd56dd9ac1ededb16c41e222ccb8229767acd389a98823e9cbaeeb9d2a21ad74baccc1c94ecfe96d355a5ce1d33a18ce54cc67cc5edef136e99d3e171f530fa57e2efe9408b83fdc0f54feaabfe163bd2947f384db097e8f9738fed684623c64d747c957e7e7dfafdde3521f0383a7bcca66bcdc686138d5bc692305eb0f5c2e2be784fd439fb795b47ed22737d57990578a86772b270d355dbd0cc85939e3d8138e847319e27d59be1abf512e95782db4c91b667014446807bdfaf2380c891d64c2da52a97ff75320c2d25e2933a8ebf734a24f1094871ecfd8ac10d590e47672eb987fa4e3db891bca30755fb7768be1ba164aab003d58bf47446b6b2276e3d2c6dc8c197db983228a48646ce585c831cb1b9d399f91ccd4af03e632b9f57a043ecf0cf17b0aa1e2de292ec8421646a89a41bd473febaa159b5261fe5914ec63147e098c4be1ea542d6833d3a8d850a596fe68c473f30501eda7082e8a58bde323b930f9a04233ed0a9b5fc59fe70bbc542a12735a20fe294ad290ac518d5f7662d6ed2bc61ed0437db592fc73f9f9dff9d37600c9791d562d182bdc007a659d13c4dfe3288a1e683dbed9440754ce2658415e7e44f2d983d2d7e7fe1a5045bd9aba3e4073fb563a709c5ba93f07496fc7d390cea0d8e361b3edb38068995bf8221c21e405d05c8ebe222321ee247bdc9ed6b12f43d8a324e43d68746b1fdee96b469c74077272bbd059b942a21bf39a7ea45b6f4b7920224faa47d085e193c73a27d368ca3b66e6e959046cc27faf23e8cb551d71c55726e840b8423d9137a3b4daa1e18d9789f2d42b55af8e91efa240e711a0e1587f036637583ed72296a68230c056b1246046e30f73c05022c06ab7ad62b91c8a0ee1d9a7c5817213a2d87d1d78e15cc85558862ba6cac520e22cde2e35cb1dfd086d8295d4e50c187828de8edc2e40a5887154d7d70c3fbda3ad9097a0e862b822566614423b806c2b16f0af29465df4cfbcd6f1db6ba6d71aac7977239f7849b7c05d76876a066d3230f4c5173086358c6234db2488f9f8f0e57f9a4748f13b2d199b877b5c05c6380a6112ef93ac9d97bde4366cfdec98d3a805d1b7b0b8707a2fb6c392c5cbc080b575d14eda679f99e3f4add47b7970d8c869893868efe80a3e92f92f955038f29abc687038f9fae122575ea070b9c872f2b9ff85a11ee656d037409777267263b67ecd018e5a657b0a4ccaa33dc39f5462c2206960e77ef81049ca422db5cb26ff39c39eddc4be6dec0b07700797b9bb3d1a3a65b8cc07ddf0aae829ffdeb183f6abe8ba80ac075136d5b5687dbe5cbe0e2746524f2245a776185d056165fda1c766c190412b95a62cf2c5dae2238b298041022284665c1d198f669e2cf8064d7d8366a2e9be488d3475f073fa64ff4c2b046ac5e1a9a48bb97a5fb725035f9604a95f7e70d30fa36bd874cb83b1d4ed904cbf90348586216995cb34864e32556e6243112bab0faaeacb116cd1cc15304889059feeb24b004dd0a82e3d14d469fae58b6e3d384c77c960b51b1dbacc1591716e97b3119c1fc560bfd30b8f97b2dd3856738d1491a1262af0823993190ce25ad93c4d077b87cab5939b281e57678e899588349b4d64e16a4e3704ad65ef0ecb8fe110a31ce5562dc44aad99ce5c7017bb1cf35056fab21c0097b891cd53c4debc889cd92c0bb86d2ef33fa05503413fe89d0474838b8b858c1e568325675875c87badcb39777fd4b8464cf5c563a69ebae37f4dbcb4a4453530634dda322cabb832c0e7c6b60fc94ad67f13dd282bb9e19905863115e091516bf7e2a70d279c4a47e029f566097f1baf4befddeadd3f7505ee285543f75b7136da5d69decfe585e3897463cf0861537c723fff46240da13526233ead3428f531283605b9e9942cd4607866661251dc1220e4f3d776a360024451a85a03fcccbdbfa46340b8aeef062cfd8ec158e9bcb64ef913cf81b3a8b4a3eca15f7c788a0e1499f61fd118c1fd781ca68cf7db99e4873d9fffac763bc7da0a843e3cb4ce3404750bc116709c5c3bd9a72631f2b378bd2af583d291df4ae302", 0x1000}, {&(0x7f0000008380)="82116cb7dff4b7c561a84884826d93d555c8bad322aa24a11c13a63f6c3926838744c0de06b1027de10372b0862aad5f8c6e350e14d0d1de146639dec839fc8cc532c894dcd1ec4f720c31bb4b2ea72e3d97b2d0f5846e", 0x57}, {&(0x7f0000008400)="8b7276cf2159cf59fdd3d7185d2be062fa6c4a466fd25ef99e2fe0abe66136886fa1d2029845f8d44de1728c2b", 0x2d}, {&(0x7f0000008440)="82dfcaaff82794e01a3487cc096348129da76f1bd13e871c5fc3f4d2832336339588ca7212f0cf30530bf1f9d2a3fbc01ab23ca8798d69568e8363295b5887539766eeedef2f24a6c723e803f1045c87ff36c59370ecacf6b79e545230701a0defd9762a4a9efc87dac49c27e9f96ce42971cc7bce502175ed0bd737d7deaccd2d525e891febea1d398a0e4683405beadce4d2e74ffe248ccd673811b8ef30fd234a5b518f5447d2f159ad62211939fef6c30680ddca5f2427c7dc6795b09a9d02120ad3f16abab97168eae0132b380f10a53f", 0xd3}, {&(0x7f0000008540)="bb5bed36f65ddce43c64da57acee4ff51115a6f2983bbffbe5c3e14728feeab4088e5ceb0a13d8921968485767", 0x2d}, {&(0x7f0000008580)="8fce5461bf9ab7e52c28d80910e08f8a7800d8fddb94f4a5ad90f3c69dd625515937684ea1dfb0c3993b21bedd0d696e61050bb074d0c9b829df4a8f150bb0dae0e6c9cd83a94e69fabd79baa59b22172456cffd28a1ec863131e7779d2ba6c1c9be169c912bc9d4d11d524082d12e466bb9477e28dcdf98e9721027ff8dd3b70dd8c3e71fa6b98a87607019f3bd069876f931d3812d179c025962f98a5ede2a9808140a0738bd2f2af8d72ece998e43227cd666656e7891b69539d06a2db1cf7ed8e251bc5f3a2690e5800567412b737b2670515da1a674d380949313d3ac0ff6752f10e11afef8f8e3a34790d372d73ad1f4aca39bb8a1ff58736772d55e77233e9d71bcdbf1ecf8524610906415d79457633133abea29f15ee42437b80fcc212bd1cd814a08ddd239036a96bf2ff4ab570a3f67ff0a902593a76b054de0c867ff34ec5c5b31ff4198801d92ad50a9ae2ec83b59aef4dd3c7c9c44699ec2b6f83f8a56ca32043599cfd857936f6a2dde28820b6e154fff0767a51cb294c1fd77bec43978fb7fdb5804244cd0791a3d0e9b5b26117bff40dd1ec75f07e2ed2b3f3d1c19d6733274230190288cfa4b8b204fa7695d38a9d83d19d24e5919388acbfd41738e4f68e576e007054b387dd3446be3b988943ee6f3bd37df8e872d1691b5b17e97e0e2015eb064667b62d1d09cc3dd68219a0a2ff61c2dfe981f27baa92b2ba10fc5b5f19ff61b7ae74f9fbd9b4a0579d9518c8b8afb6551e481cfd09005bf4d1146d62338020323fbf1e6ca280f62c72a5e2f4541ad90af59e5b441095249a27a27faef5307dad06aef01e856c4eb3fff34ed4a6789f0e8a6a40fe077028f87d6109321051585ad24f8283bb6d13c66ebbed8b2c68d96762db8c1c464467623ea1ed9e83a292583291c022202826f390941b3a8bba3943a588153fa23d769ded05fe4f9fe57d86dfa2afa12810e3b45bbc3f964a50a792d5433bc144937eb3895260c7bf58f5a541f875fa344137c6a4f6ee75258860707931ef08bab08520360411ec54764d72b9d951fa30fc28833acaf7ce45ac1a9efc55a8c69d9b0cee4a1dfc93528cd4bfc9827634a368092910f88576b87d8c685a7991f1e967d9bc1d913771c700a00cd920ff54af701561deeb7baaaa3cc9617f6a700dd40581f43e229572728e5f42182cbbdef13fdffed3e33c8fa48c76e4ca6c8672426f436a71bf121e59dae9a804cbc7ca337db34c232c139857fe939bd6633c54a66889ebeb1f49cabebc9f72c355dac6c1b6e86de22f5afff7ce2942ad009e46a22376ecb953b41f4413bc026e7a92a0228eb13c28dc53c20769a9b420bbde1f3520c640677bff892337e610d9dbe609a3dcc42594ee42513e29aac0ce9e184d762094cf465cf4a40567dd3d880ad5bfe27072e647e6082fce40fc4df0e8bc05fe02cdc5ea6de23a0e6ebe936ea11e5adb980192b1c4ab8074ffa1ca415d1b22e4778f321e0776dcd4b8ede12bd256c64897937245518fa6bd9a8ea8f54bf268600a97feefdd1b9185b08331179c8789ca11dc041ddec594d4356e48d40aa85671a3e9f0eb3f32567f16341569b4686026e2c6e0ff9a77dabe102007f021b8c0ca9f728450808e47288830d34ae4cfeed59c94fc91ce039dd587b785012ea9eb6bf651101051de5030656b2fe1ad1f23b2f0d776eff8285a97e312366cbf68aa205b872ead321e64235fb48c03b34f998c48e7350c44f71be1fc9f48fc65e82c5e1b3ef2d7827cd603d081dd529eb03875ad1425636187805e3ebb72c59d4a87fd690e6ffc362598053bd7cbe09089d426d1c719721a043c8aa60183d69a6262fe4a4b9ae5229c5ad97a94e3b2c7575f641c3e24390c8c9c55453957130aeb0186cdc7d976674dd41d0b0d387247463354988dc2b9d7ab514da05f8f96c0632514d6f026121a721811b8e527cb5a3f4bce7add0ae960b5ead40b8e9e9efbb641c800aed472271c3eeb5e2cf938ff766830e001417fdc3b3883e1e9a04dcaf293e45790c31f2740762c24d9dfb1bcfd9b1b4be534f34cd182dca74a359c781f5192f65b592602068235819b27022479ac17d397ba4ab0da6652b6eb8aef3007e5f20634d244560fa5c8817f629ed72cb9e336792122228264943d133eedf0e5626bfc89cd891780cba41a4129ed683d6d16ae95374c40082cf1befff887ceafcef4ed222e9561a3377470c6db6fcca4163fc27fe0793773da84843b6371cb14cd7ff8eb84813da092042282b161f8cadd7209b40fbf7e970c250948fe112e5d3436225e7830ac11a9cffc43be20a52b3ebd2679b1eacd9ae707c3732684d67d23c34dbceb02604d9aa3b1fcaa70e5c1fed96b72e435f1ddd9d96a0712453b57d662c8dee12e8b7dc0e91723014cc544cca5c06bae91e4bc14bb9a6dbdda6a136f3f053cc06425a3509900ccb3f9f4d8464459d74ae39ddcc49255898b48caf5443b9a67f83ad907f2ee838a267fbf2eed7296f2c6a057f3e53d8006809148b298a034568972f072b2da0f6d04ebfd149863336379c5a17218beb650add956026db89dcd32795ab42b8cb63af3abc7582c07ec122e739c8d953413b9c33147f8f2217eb54772e60d87ab06618df232039a6a842e4ef608ce0ed0cf95484eac70b8368079a045e5169c47fcd5399eab0274060d3bc08234d8ac5fc1801a589318198908b16ed4872874519cb725fddc25d1400171f5e79f0c92dfed191fb55bf758bca134e95b83d5fad4e6a279699b6ebc6ef09b88c8c9ecbb613896b9c1afea6993a5e68db903fcddcd90c2390819a5d1ea0c0026312a10776c179f5bafa036a046e33e5971ffccb822bf5eb28abf3326244cebd7c476019be4c833c7f162430345035a11fde0de101a175fc83d8ed3dde4857949d654735f5a2444f98d0b5eb79ebe8c997bdc33a79a49ed52d242f21a31504817f343b106e268412a33b3bd5a224cce668483425616a376589a6df1dc389a9fe779f55aa1b4be354f8ee7a46f96f441a75676d4621911e982a08c099756dbc7b5f05e12185b47f55d083e7a0761282bd132357c4d1d269cefe70cb957dbf8f92a965851ad089d0028f10299a5da2b85f333983110c552ae7b087029796260b0f467e2900af42de4c3a7b6cf94decd68cc34ea73bca7a4f6b76eeceea7801d67d14b43fb04a130c7471f754d792fa6f712867eb4c43958c21041719f100bb9d7645b4fd9a62229d1a3edd29595fef33e0a633236eaa307d9709d362ef8d3a0b1fbf6b9f589aa87c53a2250fe12d31155ed7f79a51c5026d83eee55419301760970275890c60d23d5261dc7973db4a94882e10b46af9a7c9eb0d952913ff125036ebe78787fe62d2407915cf6a2108f2412d7fca834b111c3114ca37007a30a6e0758d88f832869cfc2d8a2e9c225241e3100a4899ece963ba124606a81e38356af6dbfdaa050d6e9de27d00edac691306c10a3dffca37a2af26b049d0429f87a7c0bf19701d06aaafd2789286009dc00f6d98e8ed807d957736eaa3ad5a21a8dfb010d86d37e37cf5f5a770667a0417c3c5863c85ca15866b51345568d7aa19cdea1831184a14268776c48ca5bb130a322e8213aae8cc4933b3f4c8f04969a8bf6d45ffda81339c19b2087afc2aeba2e6afff387c31a7cc0cd53d822d81ee34787078fe11133ff8287ef14f598863fcf7b7ff400b3856be65fd550fdbb7a90811cf8f2972b77de4480132c65d6434b36f14f9c88828735f56196752aeb3789c8fa675b4c0258f60b401c9b5b1eb63f93e9e38c7029dd05cc9215dacd2b227d4c1174c1bb7bf71fb06f54d1ca9cceb1e9db32a015f153d73f843c29ac37756678ba617b5584aae8b9a9da0f6423f87bafd0f2e053b023c9ed4b7921108f3bc1920154eb96da1ffd265fb1d8a19c0dddebc0308d5a93fa1b17b65c03cee250a96c1284aa00c0e9a17167c7bceb20a900a4c076e293e6e74fcd70e795b22cbc62351b05783c3ecc61883af20ee15dc1ff66b0d1480ca54d09f120881f3f2fd0068b79befaf82903e1b3d0329151428f15f5ce05bc541a79f60fc3f98e3501425da41acb499a32ed670fd4227ae6fcbea8aae45f3fdd3a33415ee1c642253986f5373dab4516330a4c7027b284880e0c8d6738641c77ac392134e9a56e3e5c84bfafbb3274527d5da22bea59ad0871d46b003d1ccb7155e895c099c1f601bbb1c210a853ab1ffc1e87dec0d132dbbcb6997950a719a006a67dfa064d5a17173e6672f8a982737c29e38cc5fe62f345b359f2a2a5de7a65705bae4ab01c5a951f647d49800b2dbb6ae3e94f865ade957391158cc66496b43b04a3ec6c64c10529138ca0c21de47441824ce4fa1ff5cc08cd690e998450340823e4f6e52cd493785fea67ce682b7add1c694ba78e76ef614c42e3dd8747a9716aa6d725891edbf41bf4a7511741056ce27d7c1cb3d9e641f5809c4bf5f826f770923f20b17f7d873a9f8f444cd7f063f4ec7f696604c3f3a5603721331830afcb19c3ffe56ca6e144147ec8552dababbba9140eaaf6b49c543b2fbf4337d7d93402013b575873125588092fa3f6f9243d15e3b627dc44f6f8b36034dc2da73213f97535fc1e03468f93e0bbf32c08fca1ce16a19868dd46c250667519ac4071e685a290bb9e15b2ff6b7774514a717530cb031c8ab92947094fafe995fc8182aa682579329253fbfc4b77081bf9419cf4ae8dfbd088c970c8f48f9115ce183e3eddb6160aaf318d9acebdfa206e70213e8396df86c8e26154201af528fc1595f4c2b54f7660d788dd5ec78dee48215af2d26e8400b9c7ec98ec6b89f50e38453a535501dee09658770096147834b4888fbb943e121f417cedfb70c740f2250a5525648ea895d4ca8f2f2f22296c1c1263ab5c655137ebbce7121a2b1c6fa7a1bb8f92a243ac4912306ef6694976154ee918247c2244171bcd49d7390cde2a3a731eec35db61533a3e266eb54b1f37f3a23bbbf9ce0a2a80bdc8080d23af552a319b6384dff4fd8cf67d82dac79709f2add0ef4f993d6280b33c7832e5b7330745ca8cf92e367aeb67a1934b09821b19616b396844ff48fd755cf290a8129fcf96fafbe802e7b72ff3b19e020481f80bcaf4cc290940528b704d748c6495eecbdf8933b33a2bd846de9da01612e466f98f3459102e0be4689e6a153c24928335feef3ec34515d2eb6939ae797e694fca922f5d75079ae953b1759a1a74ac4cd87d76a0b112a587a15755c9d8e2cbcf416390dce3058807210d62fca679c2ed86b93ac0d5742d2c07a18e63317c21dc8a1f279c568c29ee3e92dcbafc51607d95e11838e5fbafcb41bb4c8e2400fd422f16f288423a9f55089a655791cd8bcf030d763b916664fb6e952c805d3adf4b00d355aa1e7b948141c8162cd602af704df4af0c36a80c5fc808bc5c1c29dedb602d3970b4c5632d63aec7e67f78b0b42f02d6a135865835c8816608f5bca11f318dad9c8450d03e89805a26b7be4503ee816d8587c72f0351e6e7b1d5d6e61b1f96d2a5ce6c5362d1868e774612a4670151a4bd8ba27207e0b415623125763f77d48cdb1f5c1e969bdff8cac43796a77e9848355814391884227f6fca88e4dd8b5c04562789f506dbc1724ae2d50851c41428e04353dd00d47fd4f0eaeeab2dd05927ced19f3c09b4f40d18583fb47706dd74397b371282554f38e1333115f8fd5175565b053d1cb94d3c13cf1635f797548b8120d81f69e427c99770fde99e22be59db8cc95211d", 0x1000}], 0x6, &(0x7f0000009600)=[{0xf0, 0x1, 0x5, "ab4a6c1b0be8f764c27ee5956191b2e7abf281d01eff558fa54195e8f096f4c1628ad5b9a1d7d218eb0a4666abed06f3fa0d8e39089632c9501db50ccf1227c894e6d25071334fe4eb837a1bf60ad2ec529afc68e6f2aa78d09ed50da13dbc3f4e73eca8329c980d82dbdd87c9b0d027afb7f8d3db6a61a53b535c672d064edf7133e9a4d6dfadf563f92627364714ea866b498c1970bd45067b0bd049fc78053523bd57971986dc74c01d0f86d490e4f3845af4e9511258d71d11ccf97eb03f7622772fea28696c18f7f09262ae93106207633dad94365ef7dfe6"}, {0x60, 0x103, 0x81, "69ae5775b38216e86a8df30774714601143db60575d8f3f5fa9f569c360e3e0c3ce995c802e2cdc7417a8f349ae7bbad0e6b9bdcf719f0f16de4600e369800406463c833051074ba9eb7b2147c0e1af4"}, {0x58, 0x119, 0x8, "b0f7e0020e69dfbd012bea6770fae011a80254b33e9479dbf062c40bba7552b24e1a882da8b5486687a1a9a5ad8a127124aed92699942319c5cb0bf2dc0835aa0c40"}, {0x60, 0x113, 0x200, "5ce359ccef47415a9145a1e13cff8fc386dbbc8ab80836cd2ba6b87579faa6e33d3b633c263e0b7ab023e5d6385b5e8fb80571909b4a0d6369bbce9b5a9aaa747128e0df76bc976ce2d68f"}, {0xa0, 0x116, 0x9, "34aa3dc5acd095a7aca29b05df768afe659f9ea0efca98b841874b263b9b3b05c480f5ebc61bbc97f1c50de8bb3ba6dd0794c207835a039f4579813969a0e32729faeebe6efb70f44c7ea0453eaff4e1f7d5f2a3c4dd3d7bbe23823b9555f49016862ad244b70721bb81329a8e5fd702d67dda3707cd6a3249e54ca62b7ec30e3caaa256f8c185c456bea1"}, {0xa0, 0x10a, 0x6, "fc6f91409a6eec9c47de4fb0f9b27f2d5f2b77f9f9cf0243394549a5663416496c3b3a4968bedf42b6a93d2396264615c0bcd847d17c1621d72470aab2af9eca7cc616b6b6e531b1280c6ec3d618fd8c016c9fe92b853e70fd446b05abb29ebc1735c860e98ae5a51184b655698ccfdbfcb718bc2ba3b642eb7763fbf1ef4440b7a0dfa324a7d1299d"}], 0x348}}, {{&(0x7f0000009980)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x0, {0xa, 0x4e24, 0x8, @loopback, 0x1}}}, 0x80, &(0x7f0000009c40)=[{&(0x7f0000009a00)="181023e3ab19f5da533e5ee436d91af777d08e2e45fdb801eec0b1243c8a74a8ecfe2ffa94ae7ec97b25d8d8f16c528587123fb57924d6fb1eae96cde9e776e21f26206a2ae9c485dfe2556448fd0d5b07669e004322d1c8534a8b75f3982d6ca2c368f34fcbd171379382e8f55e7d7823646a76a7e6aad30976fab8", 0x7c}, {&(0x7f0000009a80)="581557843c315caa4850b9450b2720700e0a049d5a41f20c657e504907ab940d4abd830183ecfc67cc3a266db16456d210ab28814ef06560fb374816ae8b1a5219c98d03a3883750e7b5d2ad190c2ddabfea3538992125fd43af75c51b46e15e722e845dbfe12c96890031be66e8036246d9e7c45c6962d33b57ca23b6c3d6262206fe68a788f8d5a680a7da361df3a9d3b60b154b3a24fd24ef2b01e5428711b7b8f6c67a3538ca47c88585ed567f4c", 0xb0}, {&(0x7f0000009b40)="7a8d8a0eb6d0adf134ed87366c1264fe94988d392cf9ac4c0f4c76a0d6ebaf48595279adca946dbebd81e91602a9445093c18e3f33e398b83f793859231ab8e8783679e2910fce75185ee9c2e94881f7b5e966dc6d15ac26a8981ba0a7d41418470ce692617eaa259f6b454af324923fd95cf6638e00aecee29cf250b65ebe75cd14e96e06771dfdd02d618c7abe155aafc627aa92a4abce273f023266ea1d1bed01c952a30b58f68e947bd5a43d77f8c2599e170e638f6460f72acbf25849041f2b78784a956ecc4de7974d266441dfd9591c98", 0xd4}], 0x3, &(0x7f0000009c80)=[{0x80, 0x10d, 0x0, "e9b5730e4d2bcc36b92966fbdae32cf72170fd93007ca8a0554cf7acd7757105dafd26817f4792f108b9711acc376b10aab4499d4fcf07002bc2292510a1dfb3f7ab47911c575f62514d041deffbd32b046b6f871ed2cba2f45b030d7a79d27fd9bf464021a349dd7b03ad02"}, {0x60, 0x111, 0x8001, "0aca3c48715bc0ac2f0d3cd88cc442f3917f9182c7fb348272f6ab184061008ae76853a6fa8a303f1d7fc72ce24a3943d5341fbc582127691ce0bbdf3e0aa0e6c68bdf059e237fd056acd27d9c1b"}, {0x68, 0x118, 0x3, "1e5e739bf3c49e01b6b5ece3af421452034baa7c8cb3d86b0c8c3816afdc4a880c28df4584bcdc7eb23d6a5ed18cc22dcabf7d935d4ae642c7aa0c3a6366c15ff521055ac320d8e643e60425e6101bc519466d41437642"}, {0xf8, 0x118, 0x5, "0694b082b006f9d90c1bb8f3b3fcc8790c8785f51af2bec402e84b2c0e0a863cf081ed12c331968044f6d7d3fa111f652969937749d4b0e57b6dbbc6703f4cb512898e08a7283633fa4f3515e492766d1b9bc759fe6994d640374ead6fef593a683a3685d9d48f6a32557d320f5487fc1fc13f85ff1f8274fd6bfcea4b1ef2cd5cb2abc49a8ab27c2e573975419a5ee2ff71caadb323fed08875288695d96936331ae72ac3c33ea330b0879f9489ae3eb1c0f2461863094700a81075ee1b714967daab2a5b96745d5c4296d524a95e727a2e5762828c09e03eb829742c3b89547451223e2c71"}, {0xd8, 0x102, 0x80000001, "10b2baaf6d61188a429ddfd274643054d1d0a7d73aeeb22804b2df7afea85f51291e4ffeed91273280f9d28c56e51132895589568278e59cc20ae77bf33baffecf18def9eabfe640d1ba00f1329063bc690f1fe92afddc28443037751949dc9309d59b9830efa5141b6d81f43c2ab7b9eb9761ff9457ff6547f08c23e70581f9578de43b25dc6e4f4579053a58f26ba7df1250a113dd770be576bccaf7b1149cd34f0e7705b6293067515d23a743daab7fff55022dc80cd1e68347420877730ca7ab6cb7"}, {0x18, 0x10a, 0x946, 'S'}, {0x100, 0x114, 0x42, "1193bcf6649e6ba97c199bb7fd8ec63e2d596d6202695295bf43564cf4fd923526f1ee3de4b3022ff8858d38fad773219ce3b8d550bb65224dfb3984b232d6bf0eade185a912e3c626c9d7e0fc67862788a4d5e6faceb02bfc86040cbc00571562a58fd33ccb1e2d841f0029cb4770154109c1f0f1c43cd1c30c27e1d6c60a79fda400e052e4d060a94603a003685c20dd8c16badb95723d0b5d08cf694a6e48b23caf058a20c3963f4b9156fa135fd7866f0b1abf7abc6ad345223f8b24a0825bfe1f28e700878f4b32d255b50980093ba2a57b7844aa00055f454be3d391c3dfa1057e68e9d86eff5b7e5673a07d71"}, {0xc8, 0x0, 0x2, "e487d75a131b66284f0073c81749dd9791eeb998fb95a3bd585680171b9900b58edc515b71c5b0f8072086013adb0ae8c9ec255d33c6500e1cb100235633e0802421c1a81525e18e29d139590366cb5e70289f237b3d99bad83c1b1e704009bd9ffc8a5bda0055df07587203aeeee425fa30484554cb6784e3bb45630f183e7b777f7d8f6fb8da52bc7b9f5f26555b05aa06b44a2a3bcecf74a7b78cd28389adf8e31b0210bb7107aa66b8c9269a6f8c57da5c"}], 0x4f8}}, {{&(0x7f000000a180)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, &(0x7f000000d440)=[{&(0x7f000000a200)="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", 0x1000}, {&(0x7f000000b200)="8f210466d3e9176cd8342dbd4abd0117c040ad1c51b3286667c5dc8da7b5d614e5f5276c1e07609e745cc578c85f0a560627853e0af78f98a659c536ca0ef1e16ce6f187f3c89cb79b5d37b8800ad21329663c396ec6c5fc3c00f9e34e62d63f31d80b0ad68aa1", 0x67}, {&(0x7f000000b280)="99557590f0913b2fe457d8d46b13f2b778ca6d5af20ddf7a1c018d99d5edaceffb8b5aae4c040520", 0x28}, {&(0x7f000000b2c0)="caf96395f84db1377093b665cd50864e4238324e2923c3f3714e27f732a42db9e2f562c86abc96e9b72cb0da95479062a44bf066997ced70db7eb6441befca9350b7446e09ce24a87b563bd46b5ee25999802c72c383b08e682f44902179939b190de0a95346e05cd0b001091b0cd68357a5fd6a3ec74f53ef53e864c250aaa0dae570f6d660e132bec43f1aa48d2fc5038c839d54b8daa1b8afaee37d19dd98d7263e2d2de51a314acd40856819d2d01099c20bed97a328cb634943adbe3fac222c879fd8a8e7eeb312e62d145b6b4dcd1e619e3ef0a9ce7e87eb0d5d02d99416d907e738", 0xe5}, {&(0x7f000000b3c0)="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", 0x1000}, {&(0x7f000000c3c0)="0888ea8c977674ca6d6bc1c3bd74e199a2f9e3f287584a864e2f3d97ea043b19c190de719520dde89bae669d273626ce2176e7655bcf06793f84666da211a33df2ae4bef452528957704f12b19bea5c7878544d138089d5ffb66fab4770773afcf9d757af93d279cc8", 0x69}, {&(0x7f000000c440)="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", 0x1000}], 0x7, &(0x7f000000d4c0)=[{0xf8, 0x11, 0x1000, "6f20721f9d8dd91202346a8ea9c7091f8ae7adb0d78567dcacf0bfa1458d049c9a72bbf03f52f6c3459362b6f2a682e5f0437dc668e77137b2d74b511bc6bea8033a0c44bc768152e3766ae087681019948e28929d75cfecfa16a6621dfbbb92833182a539eec24f185faa21aa413b539277a9da38fc0110e433a34382d0c7fc2e2704fe4bbc39858689438dee5915f0ce1f14e2081afb2fb79531f1dd6cf14b5a19653527282aedd7e440eba4a347fdf9fcd7d38337b117326f590a3ffb7fe6c86d8673482aa5a1c2d93d2fd3270b2cd155501a255836e494c88523df435c16e8a439389b5bad57"}, {0x88, 0x104, 0x5, "623747f0915043bb8964f214a320d9a177671b844307b05d4f5ec298e47279a30b86ea0b21ce31e9d0e3bb0067f1fd122ef818f7a58917612e884cd1e6f44524929892a290a5ea21701a3aaed30b697e6b9921bc9fe4a555beba080213f6ca9d761751763ed0c390bfb748897b592e12fd8498baf87f"}, {0x58, 0x88, 0xf05, "c602db524aa462bb8852679490e5687244817f95da3cbce4c846f2c7fae24e653339aacbde651f80f1c60a3b5515b79125547f575be9379a2ceaf58fc0b0b465a0"}, {0xf8, 0x118, 0x1, "0d8beaa380f7df72245220b85dcef3b26e69ed6a4a5f94f5d825e098c3cfe4ae60b2973fffb02a7a89aad107903c5f0e84f170778f4b7a2174ef967fb5633e0dc19c4865dbc6486b08824e020e55ca45868864008c91e6ad238ba717a6d0f4cb179ee3c67171676c9c80409cff28902dab320fd05b022df3ff6107f444f4736bcc3c1b3c6ce429130e7287abc7dd3056fd0f4311326ef1a7a4c055efe903ea82163dbd13a52b8840042d1f697e51a90641dbc2d509ff96a46f59ea1ad2cbce79465804ff61378a486eb40197093e6d42ab11574e4fe47c3357e12c5782a370492cd33f9f"}, {0xb0, 0x10d, 0x1, "64e8b22c60124f96fdbd073255bf6d271265e9a228ef8825bf72bb2bd5d5115bb765239f8207c3a6c896a38824cb22d97368382784e41a7f1bb3cef1d9c0b2ce75959f5afadfe210bb9caf738188ba28ea2797a0ba395205b5da3a23fd61380a9970cb9d8cdd7ada628c8efd8e3c92b20cfbad2b3133a98761ba7a3fb1fcc52068b8081fa856fb3422a420df5b3e79d2e56aab2c09599798c5"}, {0x10, 0x105, 0x5}, {0x80, 0x114, 0x9, "fe0af875765f967675a204f31e1787cd76642521c4a71fc6f9b92ad411da69e643a7196fd4dbccaf88ad069ee136ebb8bf149dd8f097a2f2dd756adfcf3c45dc49d6c017aa780befc82189169c345995993be7a2eb901502b749addfed067604ea396d96e8806d25e0ad"}, {0xb8, 0x100, 0xffffffff, "b0a50341d2ca212d437d3c69a2411fd86720019d9ee2847b6bce17921dbcc1ce6b602eb0f9e43b33c0b8e3fb07e32c27c5ae7a363df9f336db5e77187ad99e8c370f7f4da2169f74bca2e16fc3f43cf0c37cfe02cdfb1aea5df140aafca077460cbf270bcf67f97e4a23605d78b7a7b7b84923e0a60629355c3f6ac26a425dfaf7a62bce862f45d37027f19e812a934e2974683def1d99e5cf8ab084935c7502f07c24992dac"}, {0x20, 0x107, 0x6, "0d92262a5e238b50b9145d7bcb05"}, {0xf8, 0x114, 0x7, "0428dde7fc966de2de0585374418af79a4b691bb9d43bb77cc496c58200a2b15306bf18003ca500782851450098a6eb487e783de3bed72f6d4612a6cb0c0e77bfa906fbce454597fca39071edc1844665c5b86b5f27d4ee6b7d1c3c4cc137c5fef965988d8fd1034fb01268c9bcc9f2adfc341b52797a50c15d1ca4991b33d262818dc72cb40a5ca639ea20f2814191e64d89ecaf1daa6278236eb570ad52ed20e5702b2982b339b42b69db6e5f993ac92d9fdb430f83183616968d0d25ffb37f1f631db07ef439f7cac97730b1d63908e0aa0342325abfae8274a76e441b9f6bb1207df7083"}], 0x5e0}}], 0x9, 0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x56a, 0xdd, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4, @ANYBLOB="befd96eddf0bf59ac47b2f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r2)
syz_usb_disconnect(r1)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io(r7, &(0x7f0000001080)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00)T\x00\x00\x00T'], 0x0, 0x0, 0x0, 0x0}, 0x0)

14:25:35 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:35 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:35 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1402, 0x0)

14:25:35 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x80000001}, 0x8084}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x101ff}, &(0x7f0000000200), 0x0)

14:25:35 executing program 2 (fault-call:2 fault-nth:0):
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  455.955069][   T17] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  455.979074][T16407] FAULT_INJECTION: forcing a failure.
[  455.979074][T16407] name fail_page_alloc, interval 1, probability 0, space 0, times 0
14:25:35 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1a03, 0x0)

[  456.023520][T16407] CPU: 0 PID: 16407 Comm: syz-executor.2 Not tainted 5.8.0-rc5-next-20200716-syzkaller #0
[  456.033455][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  456.043515][T16407] Call Trace:
[  456.046826][T16407]  dump_stack+0x18f/0x20d
[  456.051169][T16407]  should_fail.cold+0x5/0x14
[  456.055773][T16407]  __alloc_pages_nodemask+0x177/0x720
[  456.061156][T16407]  ? __lockdep_free_key_range+0x110/0x110
[  456.066890][T16407]  ? __bpf_address_lookup+0x290/0x290
[  456.072275][T16407]  ? __alloc_pages_slowpath.constprop.0+0x2780/0x2780
[  456.079049][T16407]  ? lock_acquire+0x1f1/0xad0
[  456.083812][T16407]  ? tun_build_skb+0x1d2/0xf30
[  456.088600][T16407]  alloc_pages_current+0x187/0x280
[  456.093727][T16407]  skb_page_frag_refill+0x281/0x590
[  456.098938][T16407]  tun_build_skb+0x24b/0xf30
[  456.103544][T16407]  ? tun_net_xmit+0x16b0/0x16b0
[  456.108413][T16407]  ? __lock_acquire+0xc1e/0x56e0
[  456.113372][T16407]  tun_get_user+0x7fa/0x35b0
[  456.117982][T16407]  ? lock_acquire+0x1f1/0xad0
[  456.122668][T16407]  ? tun_build_skb+0xf30/0xf30
[  456.127438][T16407]  ? tun_get+0x160/0x280
[  456.131695][T16407]  ? lock_downgrade+0x820/0x820
[  456.136604][T16407]  tun_chr_write_iter+0xba/0x151
[  456.141555][T16407]  new_sync_write+0x422/0x650
[  456.146245][T16407]  ? new_sync_read+0x6e0/0x6e0
[  456.151018][T16407]  ? lock_downgrade+0x820/0x820
[  456.155874][T16407]  ? vfs_write+0x397/0x6f0
[  456.160309][T16407]  ? apparmor_file_permission+0x26e/0x4e0
[  456.166073][T16407]  vfs_write+0x5c6/0x6f0
[  456.170336][T16407]  ksys_write+0x12d/0x250
[  456.174678][T16407]  ? __ia32_sys_read+0xb0/0xb0
[  456.179448][T16407]  ? lock_is_held_type+0xb0/0xe0
[  456.184395][T16407]  ? do_syscall_64+0x1c/0xe0
[  456.188998][T16407]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  456.194993][T16407]  do_syscall_64+0x60/0xe0
[  456.199423][T16407]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  456.205319][T16407] RIP: 0033:0x415c91
[  456.209215][T16407] Code: Bad RIP value.
[  456.213285][T16407] RSP: 002b:00007f60a8cd1c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
14:25:35 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
r3 = dup(r1)
ioctl$DRM_IOCTL_INFO_BUFS(r2, 0xc0106418, &(0x7f0000000140)={0x0, 0x2, 0x7, 0x8, 0x8, 0xfffffffffffffff8})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fadvise64(0xffffffffffffffff, 0x7ff, 0x8, 0x1)
ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0x101, 0x32314247, 0x1, @stepwise={0x2, 0x200, 0x8, 0x4, 0x5, 0x80000001}})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  456.221709][T16407] RAX: ffffffffffffffda RBX: 000000000078bf00 RCX: 0000000000415c91
[  456.229711][T16407] RDX: 0000000000000066 RSI: 0000000020000180 RDI: 00000000000000f0
[  456.237690][T16407] RBP: 00007f60a8cd1ca0 R08: 0000000000000000 R09: 0000000000000000
[  456.245669][T16407] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000000
[  456.253645][T16407] R13: 00007ffd213177cf R14: 00007f60a8cd29c0 R15: 000000000078bf0c
14:25:36 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
dup(r2)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x189000, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x3ff)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:36 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1d00, 0x0)

14:25:36 executing program 2 (fault-call:2 fault-nth:1):
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:36 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

[  456.532212][   T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  456.566824][   T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  456.599475][   T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  456.628009][T16438] FAULT_INJECTION: forcing a failure.
[  456.628009][T16438] name failslab, interval 1, probability 0, space 0, times 1
[  456.645654][   T17] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.40
[  456.663571][T16438] CPU: 1 PID: 16438 Comm: syz-executor.2 Not tainted 5.8.0-rc5-next-20200716-syzkaller #0
[  456.673471][T16438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  456.683530][T16438] Call Trace:
[  456.686832][T16438]  dump_stack+0x18f/0x20d
[  456.691177][T16438]  should_fail.cold+0x5/0x14
[  456.695781][T16438]  should_failslab+0x5/0xf
[  456.700208][T16438]  slab_pre_alloc_hook.constprop.0+0x3d/0x1f0
[  456.706285][T16438]  kmem_cache_alloc+0x46/0x3a0
[  456.711068][T16438]  __build_skb+0x21/0x60
[  456.715322][T16438]  build_skb+0x1c/0x190
[  456.719509][T16438]  __tun_build_skb+0x2c/0x260
[  456.724200][T16438]  tun_build_skb+0x617/0xf30
[  456.728815][T16438]  ? tun_net_xmit+0x16b0/0x16b0
[  456.733684][T16438]  ? __lock_acquire+0xc1e/0x56e0
[  456.738650][T16438]  tun_get_user+0x7fa/0x35b0
[  456.743263][T16438]  ? lock_acquire+0x1f1/0xad0
[  456.748017][T16438]  ? tun_build_skb+0xf30/0xf30
[  456.752797][T16438]  ? tun_get+0x160/0x280
[  456.757055][T16438]  ? lock_downgrade+0x820/0x820
[  456.761959][T16438]  tun_chr_write_iter+0xba/0x151
[  456.766911][T16438]  new_sync_write+0x422/0x650
[  456.771634][T16438]  ? new_sync_read+0x6e0/0x6e0
[  456.776408][T16438]  ? lock_downgrade+0x820/0x820
[  456.781265][T16438]  ? vfs_write+0x397/0x6f0
[  456.785721][T16438]  ? apparmor_file_permission+0x26e/0x4e0
[  456.791468][T16438]  vfs_write+0x5c6/0x6f0
[  456.795725][T16438]  ksys_write+0x12d/0x250
[  456.800086][T16438]  ? __ia32_sys_read+0xb0/0xb0
[  456.804852][T16438]  ? lock_is_held_type+0xb0/0xe0
[  456.809814][T16438]  ? do_syscall_64+0x1c/0xe0
[  456.814412][T16438]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  456.820403][T16438]  do_syscall_64+0x60/0xe0
[  456.824829][T16438]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  456.830726][T16438] RIP: 0033:0x415c91
[  456.834614][T16438] Code: Bad RIP value.
[  456.838680][T16438] RSP: 002b:00007f60a8cd1c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  456.847125][T16438] RAX: ffffffffffffffda RBX: 000000000078bf00 RCX: 0000000000415c91
[  456.855100][T16438] RDX: 0000000000000066 RSI: 0000000020000180 RDI: 00000000000000f0
[  456.863074][T16438] RBP: 00007f60a8cd1ca0 R08: 0000000000000000 R09: 0000000000000000
[  456.871048][T16438] R10: 0000000000000064 R11: 0000000000000293 R12: 0000000000000001
[  456.879028][T16438] R13: 00007ffd213177cf R14: 00007f60a8cd29c0 R15: 000000000078bf0c
[  456.905878][   T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  456.956221][   T17] usb 1-1: config 0 descriptor??
[  457.233457][T16388] udc-core: couldn't find an available UDC or it's busy
[  457.274814][T16388] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  457.634953][   T17] usbhid 1-1:0.0: can't add hid device: -71
[  457.641046][   T17] usbhid: probe of 1-1:0.0 failed with error -71
[  457.675047][   T17] usb 1-1: USB disconnect, device number 7
[  458.154946][   T17] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  458.554985][   T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  458.565916][   T17] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  458.575876][   T17] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  458.588841][   T17] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.40
[  458.598135][   T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.607285][   T17] usb 1-1: config 0 descriptor??
14:25:38 executing program 0:
r0 = socket$kcm(0x10, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, &(0x7f0000000040)=0x3)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e0000001c008102e00f80ecdb670a0002000a0ada1b40d805000300c50083b800"/46, 0x2e}, {&(0x7f00000000c0)="94593ab328f28fbb925cae5efb1bae5e7917bacf", 0x14}], 0x2, 0x0, 0x0, 0x5865}, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0xff, 0x1f, 0x9, 0xb40}]}, 0x10)

14:25:38 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2201, 0x0)

14:25:38 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f0000000140)='./bus\x00', 0xfffffffffffffff9, 0x8, &(0x7f00000015c0)=[{&(0x7f0000000300)="b05a8f239c657e6e46ccbb38c51647ff9aa03219153f09281109c9e8994bf8a77b5cdf0e0955132228577e8ac402dddb400930676f257ad18ac1c0b94c751dee3aacf69baad9749762c8bed4bde57b09a02eb88ff1b4090ef65b0165d56afcbd3551eeeba044c761844021ac251e504828ec769d57f0f39c58600d3c539d47b80833636dd87e229e3cf043f9cdef15489c3bfaee33aa6e9c38982cc8cd8a24254cdc8fd711c6d0b8b2b1479d7961035a07665e7c3d735b05818ae91ba7e4b4d4f7cbdf", 0xc3, 0x9}, {&(0x7f0000000180)="1e57f2e0373466466872eebfb9407eb07b54be209b4d00023da582bad7235152c792b4f7d8b5799b9c0e626ba3914ecbc8d6e21824402b04e797", 0x3a, 0x1}, {&(0x7f0000000240)="1f5967e120d348cad8d5195f9e506065553aaee356acb7f3681a00918eb33ebfc62a13980b2a1546eacc4c248db3928f5389a7f718163df17df6a7d61eab3ffa5ddca2eeb08e4df0573a4518cf48c3debe0a1b7abd25f7ffb9547944", 0x5c, 0x100000000}, {&(0x7f0000000440)="a2203a755ac2a6c18fd4849138364c74ffe05bd330b9691f9b3c3515a7af35b7ab76eca605dd819d5ac1dff0caac1ef13b2fa5d886e973f6967f2eccda3a99473404c9e775d87e35a91dd0d12741c1dc33cb1fc45d1f68332381c244c4c4ba47fccf7e55089aac8ba79915e04f85d122c0d0a3d3b1", 0x75}, {&(0x7f00000004c0)="fce317d556d9b1294d0e21a9ed62f7be2eeef4d51b9bef30f87a", 0x1a, 0x8001}, {&(0x7f0000000500)="0b2b212a6b0489f8c53b33850bebb617fe050285892dc44f8ea771b10075d13121fbc3692dc1a51b38ed48b5c6622473aaf5add72ee0e790583b4081811d39", 0x3f, 0x3}, {&(0x7f0000000540)="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", 0x1000, 0x100000000}, {&(0x7f0000001540)="ac4ece478bae58258598d792f78b2bfaf81bf77b4c3904ed255d7771fe375be7b4e16976227c4fcd14d674142e1ae9424f59040c1acb97efabf742bd8d89d37bc0c0e5a934d015aa3c8a712f7287ce5381a5bebbda5a4c0d8f6b91eb6bf1aa7e037a", 0x62, 0x4}], 0x4, &(0x7f0000001680)='/dev/ppp\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:38 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9a0000, 0xda, 0x8, <r4=>r2, 0x0, &(0x7f0000000080)={0x9b0961, 0x23b2, [], @string=&(0x7f0000000000)=0x5}})
ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0)
r5 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = accept4(0xffffffffffffffff, &(0x7f00000001c0)=@alg, &(0x7f0000000140)=0x80, 0x80800)
r8 = socket$inet(0x2, 0x4000000805, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = dup3(r8, r9, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r10, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r9, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r11=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x7a, &(0x7f000059aff8)={r11}, &(0x7f000034f000)=0x2059b005)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000240)={<r12=>r11, 0xff, 0x3, 0x0, 0x2, 0x0, 0x7, 0x101, {0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x100, 0xa6d, 0x8, 0x4}}, &(0x7f0000000300)=0xb0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f0000000340)={r12, 0x5}, 0x8)
splice(r0, 0x0, r6, 0x0, 0x1, 0x6)

14:25:38 executing program 2 (fault-call:2 fault-nth:2):
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:38 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:38 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2402, 0x0)

[  458.864906][   T17] usbhid 1-1:0.0: can't add hid device: -71
[  458.871531][   T17] usbhid: probe of 1-1:0.0 failed with error -71
14:25:38 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  458.933336][   T17] usb 1-1: USB disconnect, device number 8
14:25:38 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x1f)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x400, 0xb9ed, 0x1})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
fsync(r3)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:38 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2501, 0x0)

14:25:38 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000800280012000900010076657468dea7d7eb4ed94908463aa6dbd73c0f3b42aad77be0e7de5c6cccfb2464e6b9da195bf2a02c9b29585e1b9e7fc9cb4392"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x7ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2dc, 0x0, 0x441636430448f5ff, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x5c68}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xbde}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801)
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)
pipe(&(0x7f00000002c0)={<r9=>0xffffffffffffffff})
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r11 = accept4(r10, 0x0, 0x0, 0x0)
splice(r9, 0x0, r11, 0x0, 0x80000001, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000000)={'macvlan0\x00', {0x2, 0x4e21, @remote}})

14:25:38 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xd, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  459.163368][T16513] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
14:25:39 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3801, 0x0)

14:25:39 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xa6, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:39 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:39 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x11001}, 0x0, 0xffffffffffffff7f, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x9)
getsockopt$inet6_int(r1, 0x29, 0xd1, 0x0, 0x0)
modify_ldt$write(0x1, &(0x7f00000000c0)={0x0, 0x20000800, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000140))
sendmmsg$alg(r2, &(0x7f0000000c80), 0x4924924924924bd, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x80000001, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0xe199fa9aed7214f4, 0x294, r1, &(0x7f0000000480)="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", 0x1000, 0x10000, 0x0, 0x1}])

14:25:39 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3c00, 0x0)

14:25:39 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  459.958280][T16518] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
14:25:39 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="b1b15022908b482989cb8403b00b630000"], 0x0, 0x0, 0x0})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x510000, 0x0)
r3 = socket$inet(0x2, 0x4000000805, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r3, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000440)=ANY=[@ANYRES32=<r7=>r6, @ANYBLOB="430000000ccbfa2aad2d9d8f5f5be94b9431d568f60285b5f1e2f4f8e283594c1afeb3f0d4327ac7fb1cd838811b955471a8556baca4446cdd029f0e127e723bbd1eebdd1b6e5260f2e4bae8139586c80394a722a803a4ce32b59823073818156169742444db431faa3f4f777d1fc51cc1827cbd6253c19e9cb454e02c8343436b12b46bf7644503872f747641953b55b36069519fc3c4dd873ff71cf37e0315f6ef95937107bb2b06974f9650d93293d300080a2e0a2a474e1417e2c02a1bbe4e8bde6dcf2ca7873c1d156b65a01d893d1710d8702cb9be574608bd9db6fb74015fd333134a7c8ffc"], &(0x7f0000000240)=0x4b)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000280)={r7, 0x7}, 0x8)
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000300)={'gretap0\x00', @dev={[], 0xb}})
perf_event_open(&(0x7f0000000180)={0xe256734a871b53f9, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:39 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x200001e6, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:39 executing program 0:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2, 0x2812, r0, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x0, 0x8000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x40000, 0x0)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x420a41, 0x0)
sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x400, 0x70bd2c, 0x25dfdbfc, {0x1, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40004)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
close(r2)
close(r1)
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
sendto$phonet(r6, &(0x7f0000000040)="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", 0xfb, 0x1, 0x0, 0x0)

14:25:39 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, 0x0, 0xfffffcaa)
socket$alg(0x26, 0x5, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESDEC=r7, @ANYRES32=r8, @ANYRESOCT, @ANYRESHEX, @ANYRES64=r1], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = dup(r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
pipe(&(0x7f0000000040))
splice(r0, 0x0, r10, 0x0, 0x800000000001, 0x6)

14:25:39 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3e03, 0x0)

14:25:39 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:39 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xfffffdef, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:39 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3f00, 0x0)

14:25:40 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:40 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4000, 0x0)

14:25:40 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:40 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b63000019b164b494d828f889b47d033bc4e0df5a0283ecefcf5d736cc9f8927e9e414d2861ec317e72a258564e00b1cd01f854583f66347959a40b3c3623e0e00941097dbd1806d7c5874399a92fc5c25893d0f91b152870dc4db6e3"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:40 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4003, 0x0)

14:25:40 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0x0, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:40 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4201, 0x0)

14:25:40 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0x0, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:40 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
r2 = socket$inet(0x2, 0x4000000805, 0x0)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
r4 = dup3(r2, r3, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r3, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r5=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7a, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b005)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={r5, 0xd75e}, 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socket$inet6(0xa, 0x5, 0x23caefe7)
splice(r0, 0x0, r8, 0x0, 0x1, 0x6)

14:25:40 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0x0, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:40 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4603, 0x0)

14:25:41 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4801, 0x0)

14:25:41 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:41 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:41 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5202, 0x0)

14:25:41 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r2, 0x8200)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/807], 0x10)
ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000240)={<r3=>0x0})
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)={r3, 0x16})
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={r3, 0x20})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r0, 0x0, r6, 0x0, 0x1, 0x6)

14:25:41 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5401, 0x0)

14:25:41 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x2], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:42 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c00, 0x0)

14:25:42 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x400000, 0x80000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x80000001, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x7fff, 0x3, 0x3d, 0x3f, <r8=>r7}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r8, @in6={{0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, 0x400, 0x5}, 0x90)
r9 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r0, 0x0, r10, 0x0, 0x1, 0x6)

14:25:42 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x3], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:42 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c01, 0x0)

14:25:42 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x6], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:42 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c02, 0x0)

14:25:43 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = dup(0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:43 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'vlan0\x00'}}, 0x1e)
r8 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r8, 0x0, 0x80000001, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r9 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r0, 0x0, r10, 0x0, 0x1, 0x6)

14:25:43 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x6203, 0x0)

14:25:43 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x7], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:43 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x2)
r2 = mmap$binder(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0e630c40030000000000000000000000054863044000000000000000000d630000036308", @ANYRES64=r2], 0x1000, 0x0, &(0x7f0000000300)="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"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xb, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

14:25:43 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x6a00, 0x0)

14:25:43 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x8], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:43 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000080)={0x1, "80"}, 0x2)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="cf2305df"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000140))
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r3, 0xf50f, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:43 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7201, 0x0)

14:25:44 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x33], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:44 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7601, 0x0)

14:25:44 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x3a], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:45 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:45 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e00, 0x0)

14:25:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x58], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:45 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x2, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(cast5)\x00'}, 0x58)
r7 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x1}}, 0x10)
splice(r0, 0x0, r8, 0x0, 0x1, 0x6)

14:25:45 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x101000, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4)
connect$rxrpc(r2, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24)
r6 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b6326d3df1000"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x121200, 0x0)
ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000300)={'syzkaller1\x00', 0x3, 0x3})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f0000000000)={0x1ff, 0x5}, &(0x7f0000000200)={0x77359400}, 0x0)

14:25:45 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e02, 0x0)

14:25:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:45 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e03, 0x0)

14:25:45 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x8601, 0x0)

14:25:45 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:45 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x8c02, 0x0)

14:25:46 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:46 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:46 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x9003, 0x0)

14:25:46 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674029167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:46 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f00000001c0)={<r10=>0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4}}, 0x3, 0xfff, 0x3249, 0x0, 0xfffffc0c}, &(0x7f0000000100)=0x98)
setsockopt$inet_sctp_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r10, 0x7fffffff}, 0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r0, 0x0, r11, 0x0, 0x1, 0x6)
getsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8)

14:25:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:46 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000080)={0x0, 0x9})
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000003c0), 0x4)
write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYRES32], 0x2bcf)
recvmsg(r0, &(0x7f0000001440)={0x0, 0xa, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4096, 0xf99e}], 0x8, 0x0, 0xff96ce4aaaa47475, 0x7115}, 0x100)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/807], 0x10)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={<r5=>0x0})
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000040)={r5, 0x16})
ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000180)={r5, 0x8})
write$capi20_data(r1, &(0x7f00000000c0)={{0x10, 0x9feb, 0x5, 0x82, 0xff, 0xeb32}, 0x7a, "1d25427c15f85a94c118f1688ebd3f6303e79b0b67115cc08837886f98603986ab3eaaea648d5704739d14bd889738291ca020fc312e057b691ba9bee39b6032d289a1eb46aadd27d1ddbc7ba3a1979464bb07283b9085f733ba1401ab0188bd41018abb6e5cad150cbd8a65a019fcec1c7cee48e2637a6f2c9c"}, 0x8c)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x80000000)

14:25:46 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x9603, 0x0)

14:25:46 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674039167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x9}, 0x0, &(0x7f0000000000)={0x1ff, 0x100, 0x0, 0x0, 0x0, 0x800}, &(0x7f0000000200), 0x0)

14:25:46 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb201, 0x0)

14:25:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xfffffffffffffd6c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_handle={0x77682a85, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/16, 0x0, 0x0, 0x2a}}, &(0x7f0000000240)}, 0x40}], 0x0, 0x0, 0x0})
dup(r1)
io_uring_register$IORING_UNREGISTER_BUFFERS(r2, 0x1, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:46 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674069167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:47 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02630000"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
r5 = pidfd_getfd(r2, r1, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:47 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb401, 0x0)

14:25:47 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674089167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:47 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
recvfrom(r3, &(0x7f0000000140)=""/14, 0xe, 0x2002, &(0x7f00000015c0)=@nl=@unspec, 0x80)
sendmsg$inet6(r5, &(0x7f00000019c0)={&(0x7f0000001680)={0xa, 0x4e22, 0x10001, @empty, 0x3}, 0x1c, &(0x7f0000001740)=[{&(0x7f00000016c0)="afd2835b896778ef71e439a478c95547fdc9e3fc1699aaccb94ad46605f100df2f620c920602b5c5785806ba1c70d841cd4d813badea3abe37e109767fc8f2c0b8d2ca59c19fc1974af8e2b5", 0x4c}], 0x1, &(0x7f0000001780)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x3c, 0xe, 0x2, 0xff, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @loopback, @empty, @mcast1, @empty, @local, @private0={0xfc, 0x0, [], 0x1}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x6}}, @dstopts={{0x28, 0x29, 0x37, {0x3a, 0x1, [], [@ra={0x5, 0x2, 0x1f}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x19}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x3c, 0xf, [], [@hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @enc_lim={0x4, 0x1, 0xe1}, @pad1, @generic={0x81, 0x62, "4a207e590c9054ac02c111931c121fc47f33685a0fe595bdf733eb72fa2965df7b2ac7aafad6fa5d53f56cdeed712c5a334a12b35546c3a99a7cab3e67a47b024214a4e41e0d15fe3ed9d6e80211d76dadc2aefded65be3c1740876b8f707376bdf9"}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x2, 0x7, 0x0, [@private0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2, @mcast2]}}}], 0x218}, 0x89305c2510f71e28)
r6 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)
pipe(&(0x7f0000001640)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_script(r8, 0x0, 0xfffffcaa)
sendmsg$SOCK_DESTROY(r8, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x13e8, 0x15, 0x10, 0x70bd2a, 0x25dfdbfb, {0x23}, [@INET_DIAG_REQ_BYTECODE={0x83, 0x1, "8fdf4098cff23630cd78d489943d5fc4d29ae784e2b383c026dd20a6fb8f1c580d681e45149feb2f6c2e32b5fbd653267227ea490acebb945a2388f1ebf5e8f25655bcd38b2354ff0eaf3be78c6f8b4a4d2771ada2e10563bd3dc015207563f36343bf64c91da6b4006533d16ee9da0509a33fc34868c30013bb017da356fb"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "e9edd2d6b80ee1b903e73661ac5972af8d05aa7fadb76e341310fa6a33cd906cc5fe7447073060391dbdaf0470112c7159cf9f1120916124543a080259420827190da69301a3a906f051e0f04c6f7dfdfcced74b2e520c1b7e7fb4c075ed0cc6be42917a0ed69cffa05dbc1e4eae55bb735d9f0e1b7ef3af5e9a4b4a8f05f0b03535a33f2b72ff16718c23ff9e62703e"}, @INET_DIAG_REQ_BYTECODE={0xb4, 0x1, "58dda8e9e68c3e150e0a9bd72c1a573a075567c331e3fa308a673eea5e70043acc6b6f48f8e74d7338bd609a020c9c9f872ed17637b63fd37e9436f5e705489d1ffcbd177ec28f575f44632253aab757cf7deea77053021b2bd486425386e9d2bfb8d844e237454c8aa11acecb27b9e83461538cc376ef1b4fd71ca0f2c0a9d2d971d5a0c9cfce25508bdd3c1f92556bb69c39697414ab03586e16a1d91de917ea2d1ef5e5d7ff3ef6c4d64d6aeb841c"}, @INET_DIAG_REQ_BYTECODE={0x5d, 0x1, "e90ca18e2652f75c07d2dbc304400e44c2602974645a38580bc2727711a5bdadc1e2cb11053330d71bb508de88bf60f16c11e6f4d2c1b49eb415d9ab67e95e67aaf510204980f16bc024a118978b65e8e0d97c826e3aa31674"}, @INET_DIAG_REQ_BYTECODE={0x77, 0x1, "ad0afd63a2742297a0336535f76c77e353fafef60638dfd4bda0f80718608184cd1fcadc112567685e92107657b8500617f6d7a371cb67c260d9d2325c5b81e919a9143913c8234930ca5e525f9947b4d8714730cac0b5ae82b99ecd950cffb60a218e56595caf29eeafabd4294945e21832c3"}, @INET_DIAG_REQ_BYTECODE={0xa6, 0x1, "fc905e48fc20eef1417bc7329040f95c536b8c2cff2dccb7d410cc7614cba13e50bb86d30824ff8917c3875f88d76025ec02bfab05e4913630d09d8b7bf828b06ae88cdfab3aa2ba9e3510b67a0fdae51079f785870b0ff07a514e910f7a7a37087bef269b37c3d00398833fc372d3d52f153a2de56febb7a9b31d2a2def13f30f692b9169777cb1585dd779514585d16880b82223bc5fe89a17c321e5069ca576d0"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "0150ba6964d8eef03c94a766b2abcc14d2107b1247c9a794d09226e8e4db50a57966162930566fdf1032b0da46410d272fb71fd4eaf53ea16bd2b4b922cb2bae09fbae6fb51f26b2bc860a3cde04e6037d594cb6f35fbcc58e36daa5a081fc22ecb157dc681322f73f1b8d1c5f7be27e48a1c02b55e4eab1b422e97bd37080cfd3ffe553b968528a1010735f17ea5b44d5a164a22d53fe1a0e21631237c85b815180a7ba2b6eb9d282435a617f750a70e0efc0edf39aa22f51c61631eefc20bbf3d3bf6532e997644ff2a80e1c810fc30ffa5d598d2d5d58f1842098e1a7c9d5c44a41447c254b1bc6eb2d2fd278bc3f1281d23cd3899d9194dbf7cac7e16921cb6628c95515ddb85b7faeed95b5190243e7448d2b1876a306163f0f4f1113760ae330c492383467b872aabd7449c4307ef6e98464d46de37db4d6b879b9ee1824925a93f781957106a1c92030051f26adff02e74e89ddc6abc39e6abe63d106ce5a6a721e5cbe4ed5048e92f6a698f2fa8f2323432b73fcc97177e89d49958c9382b4884f9e15b40f068283c38749f11604c9a50968ea0b29dea5805ecef57dd32bfac1515641aec5e24bad581ae18e44f7f4d3d7d910b563e18c57816e664beca721512decf7f59bddf3165fbbb3f4cbc04ad431d327e81fd5c6b0321b0a26869659e530ed524a5ab130257d72defaa661d6bd3da5d5b60452cad86a74335a7422384d4bad6ead0a8c607fd6d7d1e4721af73844d04de6334aa64a2458861d9bc62608ffffeda6b94043257e3bc9bc2a270e5eb4a62b44d1e3031435f0fb1c8e556f3ac9eaa6d66436d6f974d9a2892fe8b43f9994270b416b771f48c6372077676966c03d79195b532950168a77a4164a6cb13bc5f08ee0fced736e474b125910b9547ab30b832e794bbe2aab71c443b2579f7d8d3f8086c4c0a44eee3652edc5737ec52f1aa791331a838444d172d620e2ee210e1cd0e59f87eb2e543ccd3f9cd45de6f9d14fd0f0fdebd364ecaeedadd37635179eab188459c786df8a87f3b014033d835e38f89334de9b8e5fdfc8ea3887392f08606cbec467eed8f32f7b4e1c012cf67858f95fb44a4d75e51349350f2be7edddbf7420be4f7bf692c5b832802a21db349cd8dc58c2cb341c9517f81fb3355d57df2ad9d825cc48108d076c6c8a8300c1f22ffe13d68cf2300d9e619143c4677b3bb15b009edadefa6def58b20955774c828bf0590cd462c97b08bbf4957e37e0802f9b62796229018188460efeea702da9008bba61bc3277ca0843941d28e79688380431c57719c496579e464e2012ff462150e4f1aa6d15e451f0adc108a2f6c66a2f9dd9e6564ba0cd4192014adf5df2d473327e92c647365d63bf178859f59ac148d99b3568f07f30a13522154accaeb19a071d4fcfd1a18bbd561d6b288f87169d1392ac910b330bc2ab8ade7bddce43b76b1d81d06638276f21f3db3cacdb3a85b635b8b3c1d2bb6b863d18dee3789d68371d0b2feb5e860207b1fd49c453729f8c8bded65aa22b70de50a188a8b1915aff5597aa43b7efdd29a93058b6c644fad77e4bbf4ca430d7aeddf0321585c811dbd675acc26d88e791f6d9a35d80cc313b7e655a7f64412ec3f3946cdd99c073c0e1b42be62ca996a5c2a516b4ff8d049fef52b84f0620787d5e07cfbdfabe0ffea69f19a2f47e0bdddfe3471e41b2986f2cb8e18e8c4bbb566dff82bb511a9480b3645efa61ea39f2cec73b6d3eeec2e6a0c5ded8a14616b73aca93dd24140c060347a62d34328740b2af54cb5272723e560b8621bf67ff3c1b4d86cf20ba312197d77e03e253eeb1cc98fa4bc26ecba29a72be9da6d4fccc08ecac8c7ccb3771899aa561ae7f8ee1bb54b68afbfdf72fbdfd96b6df0f9a0544355b82bce7a67d281a3eb5228d64f8187fa9e9147056c2ee2e8bdabe050bdf559fa8b1af25f84424f331d296d9400296cbcef28aa6876156cd08717aa00811b3d20e40365c25f407b281f0965c61e2f951eb4c087299988d2ac5b8ee98152128c36708e4fda1da2be183c6ee67b1bb41c6820b6f56bfadd8849a87924d311532572fcaa9320ba5448f815c96484050d5a4df02ebec7d0ee3dd65e083a8f938dd3ef4e46ec9a824a3d23da8e1e4db34e021611c162846d27e1c0b3c84d278d661c5af9beca35663e8c4216a73af14c144bd434d3a50580a08ed221ed023e5effcabf5ec2035a0493561baf4fb0994145562e2474dc5a4d3a7f28a25924fb5b0f70621653b9605147e8dcf37429d65b8716dc4e3995afb3929b92571c1e539eed6935c782ccbdc7343be95c3022d26feba924b84eb35dc2efdd8b5038e02607d1b75ae4790f2dda46c86b966f77da8ba0ffc9662b2d5e9b1d2dd0d241b073ab28481f99ddd6372ef30376d7ca8cbc1bf5281792d4cded41f26eb2e28f6c5168fac74db08d3803295238547070f7ade27efd6b4b096db6d890b9e0fe59ec50b34e5428279c35ead5ec20ec3918a194dbcddf3f3f372726898775c2243c85a62393cafdf5cdb2526ec7298be00bb90af58b9a9e3f04d8512831cca52adb52f0581c0c7799567cfd10b6e67e884090a16b3b6371933dbe21c400f133a5b3b11c1cedee93f065b5acca71b4e1fbe57199068604cd174d7aed55b2004ae8e9e41d98105f73ce49dca7c9210a7bd08c4af970686d1df1fe6f76e76e5025c3c98fefa2feb661ec84f23a765c8a23a63831ce31cd2d2ffaa4588219ba2023d98759282edef6b7f5349585211cb119330b1800053312e6a0e0d3325601ebb122b81b3ab175ffa3229534523f91357bec50236c7ac5a7b6765af5ae289632bf6c2a8188c91fafe16eb0cbccf743b8c8fa641ffa80585d08e8aec5df63a8987c7b12aa03a767f44fbd7f1134d947afa2210aa7a16a4ffbfbb4eb39ad2ff710c1f514deda6e2afe9738d22592b56129d27e9f5f67fdb26a0ca6482e4ddb4e9d4476b2d0242f3f2ab1c87fc8406c0134cbc1b401645a1f04005562ea22d4bc4268aa491d0f0f12d0fe7be172d11bd20416e223eb3021e3f49447635f5d5848033c58e2baa9f93b27cbdff558641a4d8a0f657462c124f91cdae6c8ef4f64e5753c8ccb338cddb22f3373b404a9ca028723a7f35db4af35ab34e18ad44927bcbf1825415ea6ed6e68ea697d9e9a7691fb37f1459a8b265a9ab7e1d5e2f7320d1c85a4cc762b4e32209c2f8588dff4e0f1c91ee3f50d29b8e9060c8c0f56ea25248b0abad7cb22c867f6d6ced5e4d2672f7036f7deb5f8df7f87247b6c6327380a92219d5c00ac219dbc78ecfe530f684b8132fcb2b1496b864990a6990e236f52282c5ae012a651da9198dc22f439fc2ad66d1857bbe20e6e59e8efa651d7d1c358f8576a24f8250cf9de07b558f9fe3832646344028a99b11ff354429b12d8872ef24514435c3e6b8deab45060144eb69b8ce98415e56cbcbb099e271c750b812fb316907faf138d1d40ac75b9c129c77121fe644a12d27f4670ee915a6bda5d701d9c10f5c4feb9698ece329d7a22388f94704acf0f5a7c5ad8d8f48608d6b7bef171253d79dccc873ce4006943cc30b2cde69ab7e86b521b408807928a2514cb40780c13dc1070ee3aa21130739b4e578622badd0e35bf18d7b9f13bf6be2842285232903be872a21c58dd9bf46cb3e6e24509d6d643e804176e9b16e93217b7bbb4757bd0f94cf4fa5c739041ec384c8c4c55606af35ac3406eab969cd278a5f9071c0f13d64e1bd90a147fa97783e4539008c464f410b1e507b4e5500ab02d47433da23d8930e9f228e7080c4cbb05be41ad11f5b63b01c619023bbeb1933d5e5d1da355001e753ad1de931da9d742e3b47afa8ea313d2703acf4a66039271ba3efd636ce3c0eb37e3cfbd3c6ff14f93f8cc42e9b982f0dcde1b9ae58d6e81725f2a340a27265c50213d0ec382d61d3354425a2686b7a3502c33755ec908bd8e0173686a179ec5df4521d1a51158ccceae2cbb59774552691efb38fd22b36398e4d9a84b67202886665477cde1e62997c2dd58eac69064780f401fa910f258b368604808f6e01799903e9007db0b369ba0b19f34ca0f498109b35db5766742f764177838d2ea318226437e0dcc42bf9dd7cd04de935d6297456d4bb7a409a581afa0a4f602b089aee36ab44d9b9bf32a09f4870dc3d2c1908b270a676e64e760ae645363d057d3ddf90d4c37d987f045a608ffb1b36a0764d123a674e0f2cfaa4de9731f9bacf1ea2583c9389e4606e50e41880d1e03c44f7a8ed295c39ee384a84c187145377db53d4e3fd9ac18eb7af6750f90b6e22fea874db21a44b29933c3d3f16db3a4084fc5d6049f264a2aabe24b863ad95e1fb460af9dbbf2816668df93e1aa02d0c410abbc656b25b257e3d3b3d8f2b7c1f8f18afc5d4e85a0e7aaccf05735b75ddd58887893dbd9d3b04f5e1058a35b12209fa122c8b52ca65baea7c49dbfa5a839eb924a26e8f3cdfd65b24115bdf7fbb1fb83524a3c360e6b01d067f8fd513579cb64e161a86b9afbfa8b8686f8de16c7f84a0a43f6655347b79f85d5704ab8dd2e041b78e6afbae123c61ecf46be939832898faa1ea08f710761b52cd5ffdf43017940dd2df8c5566fb3025e77205d91f9af1ae3c3f8cb8d4a12a07f013df7f5ed26729b2f40c95d2531ca41deac470d86c768fce17cd9674888a9ca1faf2c1cf1c92a6b5be197964dbebe5294819614331f003c182197f469a955a87a0bc49603842dec0dad32256f35128dab3d03bda23c3691f2d9b734a70e17be002914222a3e89bfe024a2e44bed1726edfd5aadf99c0dc76ce48751b1b2b68a604220e175c182d7da0de96509cb531e0504f81158e6db3759ac6756e24f5a8c8cde1082284ffb203c225fa63def2942cf8dc5bd890b748a82aac45e546ac38f7dd8e5a05836da122f019bfef8793ebaaf7f9439d6d151d0ef5de2b2454b4e47a220f025ce86079d6651602d48c47683c0236266887ec4f88137ae57060057f85127aa0c855463588f6ffbe5974ea9be42e3ff88811430e9f984382a0b89852e1236702506940390d6697d2f1d51885b8d89b680ee257f9f4c5ea141d42721ddfe41737049c6d848ca5e288cf2ab3152b67dd004009266b3afac80c6ddab5d93c2e2bab8eaf06c104e0bc5322b2c1da864f248feb967e0a40492bdd6b81fde74da81f5aa63cf90aceda70f33340d38f163ce61e552155f3eca6b745244adbd0d20e5d918bd054c465d1bf45b3a96285d445ed7120d14ad49a5dd09fa633e366efa1d5b1e45f1af5054565b03ac74b376ea900985418aff9f3ec55d4aa6bd06fe6047b98fdc11084ad4ad5b58648660fc4f9de2eba910c033c374cc61fda0cd63e505ad2ddb69d06d642c3398d28c8750c667efa2468fa869cdd2b7a3851d142a08fbb11d9c9c8d2789b4755be01a58dbecb5deb2ae864e124155ea7490c28e5e5b5cccb80a3ef2ad9811a510f4d68598fe4bd36d2f54aaac4195eb729fa32a4280be73bd3a832d860478f9b60897ed3c4009e0418043ed5d8d27730dbad4f63d57810f3ac7d3c34c95ac290b85767272f660a628b9740ba8ce85ab68dc99a5a30d2854656970015cdbfc80d387672b584a34937b54e3974f100440ab69425428765871014096d48d6e48c155e77a65245c54bb54ba43b90c34dba81cc662ff23c91b717f46c452d9ad283a5705f9db0bf368690266b74851e73c043d97bf12edda50100b3ba440fc56131afa5126f38ce1aac326394fe46308287a97f3a60"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "92091d76b59c1b01cc3d7b399ad3587feee7d6c757c66caa72e620b0cdcdb9d38b623a463a173234907464e81cdc35536cf2773d53668bb115cded6c0a84868c182bd2a1c3d7b72b149616d268046f4c16b7d271a3ca3054f8db60f62c02ee6d583e4c3b6fa46805f432073b70e11fd5037630f9b36ee0d32b74460c46"}]}, 0x13e8}, 0x1, 0x0, 0x0, 0x10}, 0x0)

14:25:47 executing program 0:
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@default, @bcast, @null, @bcast, @remote, @bcast, @rose, @rose]}, &(0x7f0000000080)=0x48, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x101080, 0x0)
ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000100)={0x10001, 0x180, 0x1, 0x1ff, 0xd, "f34436b418a962e48dbfac43d9ad2cd89b8bdf"})
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00')
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x181100, 0x0)
ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f00000001c0)={0x7, "1286b865e271e62d23c76fe98157f6ac6ce4092a0fb981d808e4a4ad085c1395", 0x3})
socket$bt_cmtp(0x1f, 0x3, 0x5)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x400000, 0x1)
r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x800, 0x0)
ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={@null='               \x00', 0x9, 'vlan0\x00'})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x208141, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x4161, 0x0)
setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000400)={@empty, @loopback, @multicast2}, 0xc)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000440)='/dev/null\x00', 0x2, 0x0)
getsockname$netrom(r6, &(0x7f0000000480)={{0x3, @null}, [@bcast, @rose, @default, @netrom, @default, @bcast, @rose, @rose]}, &(0x7f0000000500)=0x48)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000540)={0x0, 0x80000, <r7=>r3})
fsetxattr$security_evm(r7, &(0x7f0000000580)='security.evm\x00', &(0x7f00000005c0)=@ng={0x4, 0x3, "8986"}, 0x4, 0x3)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000600)=0x1)

14:25:47 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f67404916766", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:47 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0)
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:47 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
dup(r3)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:47 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167c0", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:47 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:48 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x2, 0x288241)
r2 = dup(r0)
getpeername$ax25(r2, &(0x7f0000000180)={{0x3, @rose}, [@rose, @null, @netrom, @null, @rose, @remote, @null, @null]}, &(0x7f0000000040)=0x48)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0})
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'erspan0\x00', 0x1}, 0x18)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000001000/0x2000)=nil, 0x2000})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:48 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:50 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb800, 0x0)

14:25:50 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:50 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000001, 0x0)
accept$unix(r2, &(0x7f0000000300)=@abs, &(0x7f0000000380)=0x6e)
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
r10 = accept4(r7, &(0x7f0000000100)=@in={0x2, 0x0, @dev}, &(0x7f0000000080)=0x80, 0x800)
setsockopt$inet6_tcp_int(r10, 0x6, 0x19, &(0x7f0000000280)=0x8001, 0x4)
ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000000)={{{0xe, 0x1}}, 0x92, 0xeb3, &(0x7f00000001c0)="9460e03d4a025da019d3ba2d959dba4a67e504de099f2f5c9752926edb9cc9a5c98bdbeaa59b0470e685e89c9d371dfb0ed44da1bc52f4c961536bf0c0fd5e116ec5eb5dbb1dc957d81a216f78b4e38b9c0146bb9f68d896662548cd3ca923e14f1c8b6aa5ce87767217cd74afebd281bf4eabf1b8386657ed0664a0c52b9c64ab7de405d82361cec833abb8e75439283694"})

14:25:50 executing program 0:
openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xe2841}, 0x18)
syz_mount_image$f2fs(&(0x7f0000000180)='f2fs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x45c00, &(0x7f0000000100)=ANY=[])
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0xa4042}, 0x18)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
lseek(r1, 0x1, 0x0)
syz_mount_image$f2fs(0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0xceb}], 0x0, 0x0)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000001200)=[{0x2, 0x0, {0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}, 0x2, 0x1}, {0x3, 0x2, {0x2, 0x1, 0x2}, {0x1, 0x1}, 0x2, 0xfd}, {0x2, 0x0, {0x1, 0x0, 0x2}, {0x2, 0xf0, 0x3}, 0xff}, {0x1, 0x3, {0x2, 0xff, 0x4}, {0x0, 0xf0, 0x4}, 0x0, 0x2}, {0x0, 0x2, {0x2, 0x0, 0x1}, {0x1, 0xff, 0x7}, 0x1, 0x1}, {0x2, 0x0, {0x1, 0xff, 0x4}, {0x1, 0xf0, 0x306594c00b2b4938}, 0xfd, 0xfd}, {0x1, 0x1, {0x1, 0xff, 0x1}, {0x0, 0xf0}, 0x2, 0xfe}, {0x3, 0x1, {0x0, 0x1, 0x2}, {0x2, 0xff}, 0x2, 0x3}], 0x100)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, r0, 0x0)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x24040, 0x100, 0x2}, 0x18)
read$snapshot(r2, &(0x7f0000000200)=""/4096, 0x20001200)

14:25:50 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0)
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x62a, 0x90340, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x400, 0x0, 0x1, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:50 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
getpeername$ax25(r2, &(0x7f0000000140)={{}, [@null, @rose, @default, @remote, @default, @default, @null, @default]}, &(0x7f0000000240)=0x48)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x200, 0x0)
ioctl$KDMKTONE(r5, 0x4b30, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:50 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb801, 0x0)

14:25:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="0f01dfd0ee0f005a850f91d4360f0ff3b63ef0fe4e00660fe30a66b891d7e4700f23e60f21f86627036afb72000023f82e0f1c570f0f30", 0x37}], 0x1, 0x14, 0x0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000000)={0x3, 0x1f})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

14:25:50 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xbc02, 0x0)

14:25:50 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x8, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:50 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc000, 0x0)

14:25:50 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0xf, 0x6, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:51 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x234c02, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:25:51 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc200, 0x0)

14:25:51 executing program 0:
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000080))
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0)

14:25:51 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x2, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:51 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, 0x0)
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:51 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x3, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:51 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc201, 0x0)

14:25:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x1c, 0x0, &(0x7f0000000080)=[@enter_looper, @increfs_done, @enter_looper], 0xc4, 0x0, &(0x7f0000000300)="37a76ff475c45ab5160172be18c3819b5569dd32e7022f3d93ca4275881a155ef527d535ca6be83cd7ac978405dbaabb9eca6b3e0583e37cea6bee47abeb180331b94ec7fe8e28a8fc0190aca49a6b7c5a43ab39fe318ef2021907709a7e07daa2f8b891e5a8b9ca81f618749b949cdddd2b8cb9b2fe2be08deddf56ee422c1d1366a4978bc9a754cd2db3ebd25ef87eb2d6fbbaa84aa055f706a931516c4368487c6fe7dae1c1f14a6f138003e00f10484f6f8149260091c1f77c869b0ce19add3d886e"})
r5 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r6 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_INPUT2(r6, &(0x7f0000000140)={0xc, {0x7a, "d94850f9b5bf1865b6841d4386e347b762eeb1b64bf40ab09f820409268088ccb593f03abb94f0aaf5769f7c36fabfef3e5e26df7186766c3c7e5230a2bc56e5fb2cb027acf2559612b752a8bd65111de5e55c61770d148eec25bc8df5556a804f6d0dd95cdee0229123c85097f16897e91a52fe36ec20b8b814"}}, 0x80)
getsockopt$inet_mreq(r2, 0x0, 0x20, &(0x7f0000000280)={@empty, @multicast1}, &(0x7f0000000480)=0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil)

[  471.945909][T17155] device batadv0 entered promiscuous mode
14:25:51 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xcd03, 0x0)

[  472.045596][T17155] device batadv0 left promiscuous mode
14:25:51 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x4, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:51 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xd001, 0x0)

14:25:51 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xd303, 0x0)

14:25:52 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:52 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xde02, 0x0)

14:25:52 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x5, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:52 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(0xffffffffffffffff, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:52 executing program 0:
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000080))
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0)

14:25:52 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe203, 0x0)

14:25:52 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x8, "a4f008", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:52 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
truncate(&(0x7f0000000000)='./file0\x00', 0x795240de)
ioctl$SIOCX25GCALLUSERDATA(r3, 0x89e4, &(0x7f00000001c0)={0xc, "bd250856ea92b3792680de2e505e2fb898e1b20327a1191ba5b0b027b78dc04d072c1705a8a2f1cc75cac2b777e9eab22e8665d877b9b0dd843ff01d75f3f0f2955b33d0db8bc4962168b52c891efe8e9815bd694dd3bdda43e129e6f40f9b09649c7781f136d6917022bea9bbbb84466c4b6261151a51c50ee3dedea64966af"})

14:25:52 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe602, 0x0)

14:25:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

[  473.003425][T17231] device batadv0 entered promiscuous mode
14:25:52 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f002", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:52 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xf103, 0x0)

[  473.092587][T17231] device batadv0 left promiscuous mode
14:25:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:52 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xf600, 0x0)

14:25:52 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f004", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:53 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(0xffffffffffffffff, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:53 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
sendmsg$nl_generic(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002002}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x33, 0x200, 0x70bd28, 0x25dfdbfc, {0x16}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x24008810)
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)

14:25:53 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xfd03, 0x0)

14:25:53 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f005", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2000, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:53 executing program 0:
sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
r2 = socket(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000040)=0xd3, 0x4)
getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={<r3=>0x0, @rand_addr, @initdev}, &(0x7f0000000100)=0xc)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000080))
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, 0x0, 0x0)

14:25:53 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x40000, 0x0)

14:25:53 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f006", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:53 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
r2 = dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
getpeername$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)

14:25:53 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1000000, 0x0)

[  474.239268][T17332] ptrace attach of "/root/syz-executor.1"[17327] was attempted by "/root/syz-executor.1"[17332]
14:25:53 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f007", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  474.363676][T17314] device batadv0 entered promiscuous mode
14:25:54 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x2030000, 0x0)

[  474.451610][T17314] device batadv0 left promiscuous mode
14:25:54 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(0xffffffffffffffff, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:54 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4000000, 0x0)

14:25:54 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x200000}, r3, 0x3, r2, 0x8)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000a395783c32778a5fa1bf2ab45f8644e201f73d2362e5a34f2d0e7b076755e962a9f2e6d17b6f393b9c23048ab3a4fedecc83339a178257d638659e8825b590aadb06ccea1da1928f30960f4240ded0a71129bd22f78bf3920eda6fc005f9e27a1bb968970cbe484e698cf9959b1913c3a394bfc010333057f63321803d9af015fb5fe1b212221ad7e30672d7d03cdff7f53397c1c22bcbaa941c66a52ad566c1a8819fef24", @ANYRES16=0x0, @ANYBLOB="100029bd7000ffdbdf250300000008000200020000000800020002000000080001000000000008000200020000000800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40024}, 0x40881)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000140)={0x9, 0x336})

14:25:54 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f009", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:54 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000002c0))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:25:54 executing program 0:
r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r0)
r1 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='syzkaller\x00', 0xfffffffffffffffb)
keyctl$reject(0x13, r0, 0x40, 0xffff, r1)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000076000000440000000e000000270000000000000095e1360068396e42"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)

14:25:54 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x6020000, 0x0)

14:25:54 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f00a", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:55 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000200)={0x0, @capture={0x1000, 0x0, {0xffff, 0x8}}})
write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="98028019c298a104000000000000007cbc58e89ff6ac05acdd332e7fcd39504761d5e226f0220a2ad1f987e7a1532e014fda6fcb828a1bb29816d720be050216c5197bfbe017ac1f3fc6666207dcbbf603f4c134d943b979ba9ab2f4e83c4a16d504a61df5fbae6ce93d2ab8e16e6396f8ef6452755d25d8e797d55e6e9af428187444f88b8669bab8fb8b4455710af8e0037c69dc0bdbb0d05ca293b38994e0b7"], 0x5)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r4 = fanotify_init(0x200, 0x0)
fanotify_mark(r4, 0x1, 0x3e, r3, 0x0)
sendfile(r2, r2, &(0x7f00000001c0), 0x8080fffffffe)
open(&(0x7f00000000c0)='./bus\x00', 0x80, 0x0)
socket(0x0, 0x0, 0x0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
ioctl$sock_rose_SIOCADDRT(r1, 0x890b, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000003c0)={0xffffffce, "d117c06c3b44cb96f81b86ccab4f679dad348f831d0db4a62df3ed0813b5d257", 0x1, 0x400, 0xffffff2a, 0x1, 0x4, 0x1, 0xdb20, 0x8})

14:25:55 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:25:55 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc030000, 0x0)

[  475.590202][   T27] audit: type=1804 audit(1595168755.129:52): pid=17411 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir105854666/syzkaller.dfJ2Ie/288/bus" dev="sda1" ino=16377 res=1
14:25:55 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe010000, 0x0)

[  475.718003][   T27] audit: type=1804 audit(1595168755.259:53): pid=17425 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir105854666/syzkaller.dfJ2Ie/288/bus" dev="sda1" ino=16377 res=1
[  475.815041][   T27] audit: type=1804 audit(1595168755.289:54): pid=17425 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir105854666/syzkaller.dfJ2Ie/288/bus" dev="sda1" ino=16377 res=1
[  475.842199][   T27] audit: type=1804 audit(1595168755.329:55): pid=17425 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir105854666/syzkaller.dfJ2Ie/288/bus" dev="sda1" ino=16377 res=1
14:25:56 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

14:25:56 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f00c", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:56 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x1, 0x6)

14:25:56 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000180)='./file0\x00', 0x61c2, 0x1a9)
bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x6, 0x4, 0x1, 0x81, 0xc3, @random="f4e9d441f2d8"}, 0x10)
r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0xbc, "45479ee94ca9be20cd7564da82e2a62d4025e9cd0fb4b8d816ea07befcab98cf73760c6ec5766da30e90ad68ad704ac4aae28a00c2098320aecd5de3b9bbfcf05372a4ee7fd098868490191125f5d9f7a5afbb7b8f329965a14f5361e42232ba881a18161f7500b529a83db5fcfe1352b57f74ca10988f089c12ddca16f3b1b34acf0e81f826682d5ba227b7dd22c3f61a965b7230aa4cda916280ed5ba30de2474fc599654e72f29aa783b8547ed961c17ac304e4b0aee0313a21e9"}, &(0x7f00000003c0)=0xe0)
sendmsg$nl_generic(r1, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f00000001c0)=""/210, 0xd2)
write(r1, &(0x7f0000001400)="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", 0xde4)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
r3 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0x3, 0x80100)
ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000140))
fadvise64(r2, 0x0, 0x0, 0x1)
sendfile(r1, r2, 0x0, 0x11f08)

14:25:56 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x12000000, 0x0)

14:25:56 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r4, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014)
sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4044}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, r4, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004041}, 0x40010)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
connect$rose(r6, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000e8002549ac15d654948036d6fba34fa1fb06633dcff608958e221c3705c8f3cb23d448f33c28bb480201dd82aef4fc716bd95940efb10ec1cb28630c0c684736deeb808844e2bc40d3138747e24545e067910be2a5da90a6e9e20c9ddf165ae141eed8e8699e42996629a4cc4e49e894557a220b4af3454240fe87dbe8cfc59e1c9d1154718846f49ec110a31670d069358c7c6dd9722d815305ebf789ab572b474ad428dc8da7ee5a80"], 0x0, 0x0, 0x0})
dup(r5)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, &(0x7f0000000280)={0x1ff}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

14:25:56 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x14020000, 0x0)

14:25:56 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
fcntl$setstatus(r4, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r5=>0x0)
io_submit(r5, 0x82, &(0x7f0000000540)=[&(0x7f00000000c0)={0xc, 0x1fe0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r6, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7, r6, &(0x7f00000001c0)="fb48e5795b72e450db58a5f24ff348ad9ac73d801c9db490288425ad76f4728a627a5de7973afe56ebc9b3846da1e1548ac4601484e0ccddccaf57e1fed16dfcd53c6abb204c2c67ed16ad70c36601c45abe6cfb6e0ae0e0eb32ab6a125b97fc8c769538c155dfcf019a1322ac88acd8569d9598c94baa82eb186b1c97cf15c8f86fdd31230e2eac0caa48677eafb9f9f8f96898f037cf2bf59f8d7c6e49ae7cac7ef69a7c4965f7cc3f6fb4d971419b5ac4e2e84369f672d7853635ff628b1c01034648", 0xc4, 0x4, 0x0, 0x1}])
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:25:56 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f00d", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:56 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1a030000, 0x0)

[  476.726308][   T27] audit: type=1800 audit(1595168756.259:56): pid=17459 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16377 res=0
14:25:56 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1d000000, 0x0)

14:25:56 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040))
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xfffffcaa)
splice(r0, 0x0, r4, 0x0, 0xfffffffffffffffb, 0x9)

14:25:57 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

14:25:57 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f00e", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:57 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(0xffffffffffffffff, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:57 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x22010000, 0x0)

14:25:57 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000440)=r4)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000000)={r4, 0x430f, 0x1})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r0, 0x0, r5, 0x0, 0x1, 0x6)

14:25:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, &(0x7f0000000200), 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x400002, 0x0)

14:25:57 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x24020000, 0x0)

14:25:57 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f011", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:57 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, r2)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000080)={r2, 0xeb, 0x1000}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'poly1305\x00'}}, &(0x7f0000000300)="5dc68a17961f050514aef0a6d7cfb87c713002a56daa3ac396c9d00955fb2841894115c2e98a6392dc81486740738c18b44c72cfba43d1982e18962a2a60d393f1d3908329fca0c263d4bc1275a0221bfba76b9cc4b836693103c29de8c5a2cf1baf2184fe0da5f95cbdd15a291273ae9e63e4342773755acfa82e7827a5b2f6d20c4dda76cd775e49e97814f01f787588c6d30abcb418f8f0250206dc775096a9d0a81e7aaabfb777a12407bd90e42611add56d21dee1b70df323de8d8553fb80e65e8f2658514e3d65e761e93749c0dad7e72e30fea786c89808b171df22c6d11d582fd6175d4bcca65b", &(0x7f0000000440)=""/4096)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:57 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x25010000, 0x0)

14:25:57 executing program 5:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x1, 0x6)
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x7, 0x7, &(0x7f0000001540)=[{&(0x7f0000000100)="56551bf61f8faa6bebac473604790ae69afc0c7750ce0ff41c52bb78a3f97161a1c798c30febbd62f12ee9c87809813585c4be17fc277cd0902267f6a485f70cd9d8cfde58ddeb09c0b2a875404e482d673a013e826a5a7315850a31dce5f37ce2fa29be128b643f9e2d8e", 0x6b, 0x1}, {&(0x7f00000001c0)="2f868e1e9b7cf4b417ce51af0e3c42bd3b2a8818eb9ca1358ecb247193b2a4ef66bd9454fc1d5d216a1b4479c73f77470720c89fad72bd2ec8da30b2d8c0e322eb24a59ea78d0577069eee0f4a8e56c1f74947ae", 0x54, 0xf9}, {&(0x7f0000000240)="3e5842bc1d10c8456d56c2d2e771ce6efb60388b90d2ebb073ca2b4ccfe87f4a8e8688f5743f2657dd4d994e8b3646d8697dd580e2dc61b2deea5255c3364d93c7db81449aa9f2109a81a331f95c0b98f577e6a483e6d5506c1c3bfdb233f3dd11e3182e", 0x64, 0xfff}, {&(0x7f00000002c0)="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", 0x1000, 0x7fff}, {&(0x7f00000012c0)="f42f31730f4b1b5269d01aa91ee30522d86fc865179298e85224bb913babf37b7033d2361d20ebd5a8a843e00aaa7542e2ba44d3d48a9a9914faccd1e2c0e2afe64f3f0012a7b9b90aa0a7a1547f2614b0571f77b5c23a0386fb695af5c796a5afa5d0d3f4266ff00f63a0b8effae40bda90a598bae215b9ac7bd2ba5ec36a39072be77082bd94ec9f7d048e0740fb9099b6cd0e55af95f8f3dca6a6f54f", 0x9e, 0x2}, {&(0x7f0000001380)="2cdf4e918aea0dda004ebfaee6eb55dddef6eab5ff176e22d4d1b19944c4a3c64431409417ea2787780cc54cb5b963075f98d92e8380c1c10da012a094cbf0f5fa243817e7d838ea438d413fc0f7e269c225481e05c13cb717c70a799fbe8df9479d0c18d1f2e543cdda55bc57abf702f6a46a96d8e2b22c331cb9faf398ab7823ff6578d5de1e69c9aa75dc94fc584dcb698f29a86588356a7fe351f69bcc1286509f03b4eae5fb0b5230ad42ae69adde51f4c03dcfd620db73ac00013974d96e693f93ee1ce904ace8e495ad3468c465f02d4f9e113d", 0xd7, 0x81}, {&(0x7f0000001480)="fa1216fcd7e77d1e7775033106faca5481f2e6e5eebb430425d5ca1ce4a2c2e4d6731e5a67ddb0e8e8df3949f3e313fb0ebc972436bed79f44181a3baf93efece84b123ff89216824b4820148fa74456a7cd8b47a3b4c2e9a58a281e781e0a401a8cd43f9aa3697ce350e345299e948e6d4fe80db6cd2f1226fc720c2b082a320726c5089d1bd84444a5b7415d4406cdc138a3cedabd41afc745393f1bb5", 0x9e, 0x7}], 0x20004, &(0x7f0000001840)=ANY=[@ANYBLOB])
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
open$dir(&(0x7f0000001780)='./file0\x00', 0x6a0c02, 0x69)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r3, 0x800, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000014)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000000000000000000000f3ff000000ddf951", @ANYRES32=r7, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_CACHEINFO={0x14, 0x6, {0x3, 0x20007ff}}, @IFA_LOCAL={0x14, 0x2, @private1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4841}, 0x0)
add_key(&(0x7f0000000280)='asymmetric\x00', 0x0, &(0x7f0000000000)="04", 0x10, 0x0)
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000017c0)=':,@.%)\x00', &(0x7f0000001800))
sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001740)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xffffffff, 0x3}}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x1}}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000)

14:25:57 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x38010000, 0x0)

[  478.093571][T17558] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[  478.376697][T17567] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
14:25:58 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, 0x0, 0x0)
socket$pptp(0x18, 0x1, 0x2)

14:25:58 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f014", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x8)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3c000000, 0x0)

14:25:58 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:25:58 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41d1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="0204", 0x2)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000140))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r1, 0x0, r4, 0x0, 0x80000001, 0x0)
ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3)
sendto$inet(r4, &(0x7f0000000000)="3aaa525021e535e601524314b46f2f8490555f929e04d092c4c7289218511c7700cb553cc98be4c028d9e03065d622f2d4b4ccc1535b79162f13762d63d92ffbfdcd5865f56d93dbd0bed640a7cc9c2e21482abf8b725e19159deb0f9c82841f7b6e4561b0cd86cef52bc5af51f6e257dd217b4280cd65adff32e5b916a682c1d31a9e970a84275f44911c", 0x8b, 0x4008080, &(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x1f4, 0x0, 0xffffffffffffff37)

14:25:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3e030000, 0x0)

14:25:58 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f015", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x3f000000, 0x0)

14:25:58 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x40000000, 0x0)

14:25:58 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f017", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:58 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f018", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:59 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x0, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:25:59 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x40030000, 0x0)

14:25:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x1d7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, &(0x7f0000000140), 0x0)

14:25:59 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f019", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:25:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0)
write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x29)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x80000001, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r4, 0xc91add0bf88807dd, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x5c, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x8001)
r5 = fanotify_init(0x200, 0x0)
fanotify_mark(r5, 0x1, 0x4800003e, r1, 0x0)
sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0)

14:25:59 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r2 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r0, 0x0, r3, 0x0, 0x1, 0x6)

14:25:59 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x42010000, 0x0)

14:25:59 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
splice(r2, 0x0, r5, 0x0, 0x80000001, 0x0)
r6 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:25:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000080)={0x73, 0x0, [], [@padn={0x1, 0x2, [0x0, 0x0]}]}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:25:59 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f01a", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:00 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x46030000, 0x0)

14:26:00 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f01b", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:00 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x0, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:00 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
pipe(&(0x7f00000002c0))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0))
socket$alg(0x26, 0x5, 0x0)
splice(r1, 0x0, r6, 0x0, 0x8, 0x0)
bind$x25(r3, &(0x7f0000000080)={0x9, @null='               \x00'}, 0x12)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:00 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x48010000, 0x0)

14:26:00 executing program 0:
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket(0x18, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x23, &(0x7f0000000000), 0x20a15608)

14:26:00 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f01c", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:00 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
getsockname$unix(r3, &(0x7f0000000100), &(0x7f0000000080)=0x6e)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:26:00 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x52020000, 0x0)

14:26:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="c575ac1e3e5921a8992fde572a1ab5a480f62bba3c03c4b79a724dffffffffffffffffdb9d51da4f21af9d591fed4f35d7ed", @ANYRES64], 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, 0x8)
r0 = getpid()
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r1=>0x0]}, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={<r2=>r1, 0x80, 0xffff}, 0x0)
getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r2, &(0x7f0000000240)=0x4)
sched_setscheduler(r0, 0x5, &(0x7f0000000180))
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r3, &(0x7f0000001400)="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"/3584, 0xe00)
fallocate(0xffffffffffffffff, 0x11, 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x11f08)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x1, {0x0, 0x7fffffff, 0x8000, 0x4}})
pipe(&(0x7f0000000000))

14:26:01 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f01d", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x54010000, 0x0)

[  481.617056][T17762] ptrace attach of "/root/syz-executor.1"[17757] was attempted by "/root/syz-executor.1"[17762]
[  481.678438][   T27] audit: type=1800 audit(1595168761.219:57): pid=17766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16382 res=0
14:26:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c000000, 0x0)

[  481.734478][   T27] audit: type=1804 audit(1595168761.269:58): pid=17759 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir105854666/syzkaller.dfJ2Ie/294/file0" dev="sda1" ino=16382 res=1
14:26:01 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c010000, 0x0)

[  482.450994][   T27] audit: type=1800 audit(1595168761.989:59): pid=17766 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed comm="syz-executor.0" name="file0" dev="sda1" ino=16382 res=0
14:26:02 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x0, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:02 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f01e", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x5c020000, 0x0)

14:26:02 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r0, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r5, 0x4004f50d, &(0x7f0000000000)=0x1)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, {@in6=@ipv4={[0xfffffff0]}, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}]}, 0x154}}, 0x0)
ioctl$NBD_DISCONNECT(r1, 0xab08)

14:26:02 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r3, 0x0, r6, 0x0, 0x80000001, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r7, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
pipe(&(0x7f00000002c0))
write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRESOCT, @ANYRESOCT=r3, @ANYRES32=r7, @ANYRESOCT, @ANYRESHEX=r7, @ANYRES64=r2, @ANYRESOCT=r4], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
splice(r0, 0x0, r8, 0x0, 0x1, 0x6)

14:26:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0b056377ee75c0f7978273425c410000"], 0x0, 0x0, 0x0})
dup(r1)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_script(r2, 0x0, 0xfffffcaa)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x3, 0x2, 0x4, 0x4000, 0x5, {}, {0x3, 0x1, 0x4, 0x8, 0x3, 0xff, "59b1cdef"}, 0x6aa, 0x3, @userptr=0x4db, 0xaef, 0x0, <r3=>r2})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x124, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/88, 0x58, 0x0, 0xf}, @fda={0x66646185, 0x5, 0x0, 0x1d}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r3}, @flat=@handle={0x73682a85, 0x110b, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x19}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r4}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/204, 0xcc, 0x1, 0x5}, @flat=@binder={0x73622a85, 0xb, 0x2}}, &(0x7f0000000640)={0x0, 0x18, 0x40}}}, @dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/39, 0x27, 0x0, 0xd}, @fda={0x66646185, 0x0, 0x0, 0x22}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000740)={0x0, 0x28, 0x48}}}], 0x52, 0x0, &(0x7f00000008c0)="8ffec89da464ad0454e888d1d6510a638d115a91aa569c29586d7301598aecbbf02cd52d29b71b45e2e45ef24a1cd80ea3c2ba5de792632519ff9ea57b57c7296bbe405af3447d2de0fd63716de2d5bb315b"})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x62030000, 0x0)

14:26:02 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f022", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:02 executing program 4:
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x81, 0xb, 0x7, 0xffff, 0x3, "c6c6803bcab36067"})
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
ioctl$FIONCLEX(r1, 0x5450)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2}, 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x6a000000, 0x0)

14:26:02 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f023", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:02 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x72010000, 0x0)

14:26:03 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000180)='./file0\x00', 0x50337d, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ftruncate(r2, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:03 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x76010000, 0x0)

14:26:03 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f024", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:03 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000080}, 0x80)
r6 = dup(r2)
userfaultfd(0x800)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:26:03 executing program 0:
prlimit64(0x0, 0x0, 0x0, 0x0)
r0 = getpid()
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1}, 0x0)
r1 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x1e, r1)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
sched_setattr(r0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffe}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00')
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x3, 0x0, 0x0, 0x6]}})
keyctl$assume_authority(0x10, r1)
write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000140)={0x8, 0x35, 0x1}, 0x8)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in=@dev}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000000)=0xe8)
ioctl$sock_inet6_SIOCADDRT(r2, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @local, 0x0, 0x0, 0xfffe})

14:26:03 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e000000, 0x0)

14:26:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
r2 = dup(r1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000003c0)={0x101, 0xff, 0xb, 0x39c, 0x0, 0xffffff81, 0x10001, 0x0, r7}, &(0x7f00000019c0)=0x20)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = dup3(r1, r3, 0x80000)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001880)={0x9, 0x0, [{0x10000, 0xec, &(0x7f0000000440)=""/236}, {0xf000, 0x57, &(0x7f0000000140)=""/87}, {0x1000, 0x1000, &(0x7f0000000540)=""/4096}, {0x2001, 0x86, &(0x7f0000001540)=""/134}, {0xd000, 0xf6, &(0x7f0000001600)=""/246}, {0x1, 0xdf, &(0x7f0000001700)=""/223}, {0x4, 0x2c, &(0x7f0000000080)=""/44}, {0x4000, 0x55, &(0x7f0000000240)=""/85}, {0x2, 0x44, &(0x7f0000001800)=""/68}]})
ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000300)={0x0, 0x0, [], @bt={0x5, 0x7fffffff, 0x1, 0x5, 0x6, 0x100000001, 0x8}})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:03 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0xffff)
pipe(&(0x7f0000000040))
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:26:03 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f025", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:03 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e020000, 0x0)

14:26:03 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f026", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:04 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:04 executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
chown(&(0x7f0000000000)='./file0\x00', r4, r5)
r6 = accept4$alg(r2, 0x0, 0x0, 0x0)
sendto(r6, &(0x7f00005c8f58), 0x0, 0x40, 0x0, 0x0)
ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0)

14:26:04 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000100)={'syztnl0\x00', r8, 0x29, 0x0, 0x5, 0x2, 0x40, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000, 0x40, 0x9, 0x7}})

14:26:04 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x7e030000, 0x0)

14:26:04 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000017b0"], 0x0, 0x0, 0x0})
dup(r1)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r3)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r2, 0x0, r7, 0x0, 0x80000001, 0x0)
r8 = accept$unix(r2, &(0x7f0000000140), &(0x7f0000000080)=0x6e)
setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:04 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f027", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:04 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x86010000, 0x0)

14:26:04 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f028", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:04 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x8c020000, 0x0)

14:26:04 executing program 0:
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
write$binfmt_script(r2, 0x0, 0xfffffcaa)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, 0x0, 0xfffffcaa)
recvmsg$can_bcm(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000300)=""/153, 0x99}], 0x1, &(0x7f0000000480)=""/171, 0xab}, 0x40000000)
bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r7, 0x0, 0x80000001, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000100)={0x0, 0xffff, 0x5, 0x180000, r3})
r8 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r8, r1})
recvmsg(r8, &(0x7f0000009440)={0x0, 0x0, 0x0}, 0x1802)

14:26:04 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x90030000, 0x0)

14:26:04 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f029", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:05 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:05 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x96030000, 0x0)

14:26:05 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f02a", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:05 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:05 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
mknod(&(0x7f0000000000)='./file0\x00', 0x800, 0x0)
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:26:05 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f0000000000)='veth1_to_bridge\x00')
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r0, 0x0, r7, 0x0, 0x1, 0x6)

14:26:05 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb2010000, 0x0)

14:26:05 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f02b", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:05 executing program 0:
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
readv(r1, &(0x7f0000001400)=[{&(0x7f00000010c0)=""/247, 0xf7}], 0x1)
ppoll(&(0x7f0000001080)=[{r2}], 0x1, 0x0, 0x0, 0x0)
fcntl$setsig(r1, 0xa, 0x12)
r3 = dup2(r1, r2)
bind$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={[], 0x10}}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'\x00', 0x10005812})
io_setup(0x20000000002, &(0x7f0000000440)=<r5=>0x0)
io_submit(r5, 0x200000000000026d, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000300)="1c4fb8c75472aa04767726b79d8ae26975993be7d3b9186310bd753dc85acbfb6ca561d4f01bf99ded2aee45751752847d315b72347da3c21afdb7dc40ba3461d4c701c455f1c111fab0c6ebb5fb3fdab28a9dcfef374a9a87ee743a24c3f91b7d288453980b23ec87073f5e4677e3f7c90c4925280b78c23b95d5fb51e6fab5be0ccda16ec0dd6b2db19457157b4d985c7d7e0aa9d0e0d86d27c462e5614f3c1729", 0xa2, 0x210c}])
dup3(0xffffffffffffffff, r3, 0x0)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(r6, 0x0, r9, 0x0, 0x90000001, 0x0)
fcntl$setown(r7, 0x8, 0x0)
tkill(r0, 0x15)

14:26:05 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb4010000, 0x0)

14:26:05 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f02c", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:05 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb8000000, 0x0)

14:26:07 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0x0, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:07 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xb8010000, 0x0)

14:26:07 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f02d", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:07 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, [], [{0xa9, 0x5, 0x60000000000, 0x60, 0x1, 0x1ad2000000000}, {0x4, 0x3, 0x8, 0x7, 0x0, 0x3}], [[], [], [], [], [], [], [], []]})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8)
splice(r1, 0x0, r4, 0x0, 0xd3, 0x6)

14:26:08 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xbc020000, 0x0)

14:26:08 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(0xfffffffffffffffd)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x6)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4200, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_script(r4, 0x0, 0xfffffcaa)
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r4, 0x40045730, &(0x7f0000000080)=0x40004)

14:26:08 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f02e", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:08 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc0000000, 0x0)

14:26:09 executing program 0:
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20000200054f61, 0x80000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa, 0x1, 'codel\x00'}, {0x4}}]}, 0x34}}, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0xfffffcaa)
fsmount(r0, 0x0, 0x38)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x4000)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x0, 0x1, 0x1})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

14:26:09 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x802000, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000100)={0xe1, [0xd6d4, 0x8a, 0x8000, 0x6, 0x100, 0x8, 0x9, 0x3f, 0x1, 0x7, 0x81, 0x6, 0x4, 0x4000, 0x7fff, 0x6, 0xf5fb, 0x8001, 0x7, 0x8001, 0x2, 0x0, 0x2, 0x0, 0x7, 0xfff8, 0x488a, 0x1, 0x200, 0x540, 0x1, 0x3, 0xffff, 0x38fc, 0x0, 0x8000, 0xf1, 0x4, 0x9, 0x593, 0x3, 0x6, 0x4, 0x5, 0x1, 0x1000, 0x8000, 0x7], 0x1})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:26:09 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f02f", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:09 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc2000000, 0x0)

[  490.496045][T18158] NFS: Device name not specified
14:26:10 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0x0, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:10 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f030", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:10 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc2010000, 0x0)

14:26:10 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00')
socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r0=>0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1100000000000000240012800b00010067726550377000001400028008000100", @ANYRES32=r3, @ANYBLOB="060018000900000008000a00", @ANYRES32=r0, @ANYBLOB], 0x4c}}, 0x0)

14:26:10 executing program 5:
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r5=>0x0}, 0x0)
syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX=r5, @ANYBLOB="2c00e9b5a2a0c3e2629d94451e1df685caeae69c089a126b2fc5164b71ebb5f7095da0bd7b86e0624818df7a650456e23607ef20f10352e96fe204a5d05532b66fe4caf2156ca23c8a83b17008023e5de44503e819edff4539ecbccc750af63a4ffc81f303c199985f144f4bdad9a8965adae52218e8b61d3956f09365764379ab7f1dd65985847dce34bc"])
fchown(r2, r4, r5)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_aout(r7, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r8 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r6, 0x0, r9, 0x0, 0x1, 0x6)

14:26:10 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xcd030000, 0x0)

14:26:10 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
inotify_init1(0x80000)
pipe(&(0x7f0000000040))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
fcntl$setsig(r5, 0xa, 0x1b)
splice(r0, 0x0, r2, 0x0, 0x0, 0x6)

14:26:10 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xd0010000, 0x0)

14:26:10 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f032", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:11 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000000))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0xcdd, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x1f005})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00')
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000540)=0x4)
sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="fa8d4141a1d9cc9ec5007f0000000000000100007bad9a336d3eb34bcef57b8cb418bd3755203d07754ac2666fdab7ba4b180b089fd1d72c00ba46b6245891e6aa77ed75fb41b27e834d8552c8a0c2f1ef8cce5d7580659cb2b09c043c73d530abf9d9519971081cd552ed8e900700c9552baa417764397f3279e71ab3a01bc83a153235468327a39fb9f9d784e31010a37c5ff432ea95cd5456ea61185d778ea154bb9687cdeb3d978a43756f1da7e701", @ANYRES16=r4, @ANYBLOB="000326bd7000ffdbdf25060000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000006000400000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300010000000600040003000000080001007063690011000200303030303a30303a31302e300000000008000300030000000600040003000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x240088c4)

14:26:11 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xd3030000, 0x0)

14:26:11 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r7, 0x0, 0x80000001, 0x0)
ioctl$BLKSECTGET(r5, 0x1267, &(0x7f0000000000))
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:26:14 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0x0, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:14 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f033", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:14 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x8, {0xf3, 0x7, 0xe8d2, 0x8}})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
ioctl$TIOCCBRK(r7, 0x5428)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r0, 0x0, r10, 0x0, 0x1, 0x6)

14:26:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xde020000, 0x0)

14:26:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1d630000"], 0x0, 0x0, 0x0})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff)
dup(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000002c0)={<r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x401, <r6=>0x0, 0x1, 0x100})
ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000140)={r6, 0x4000000000})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:14 executing program 0:
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00'})
socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x79)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffcaa)
r4 = socket$inet(0x2, 0x4000000805, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
r6 = dup3(r4, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r7=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7a, &(0x7f000059aff8)={r7}, &(0x7f000034f000)=0x2059b005)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r7, 0x9}, &(0x7f0000000080)=0x8)
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x2640, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x2024993be829139b}, 0x800)

14:26:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe2030000, 0x0)

14:26:14 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f034", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe6020000, 0x0)

14:26:14 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xf1030000, 0x0)

14:26:14 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f035", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:14 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f036", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:15 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xf6000000, 0x0)

14:26:15 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f037", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\vc \x00'], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:15 executing program 0:
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_script(r0, 0x0, 0xfffffcaa)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
r3 = dup3(r1, r2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0), 0x0)
sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r2, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$binfmt_script(r7, 0x0, 0xfffffcaa)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={r4, 0x4, 0xfb, r7})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="dc96b93b0480d8524d9800859f6e5f3bc2caaa166ff2410274e93480e031434c7f88f71b26adc5d9e99f6b0f84aebbd1b958cf17042dd49ec5e663a8ed53ecf2ee5989f6bb6bf0dd2a4886a8db0bdf3e9da58b8f8d777e979f6db4cca04b78f094a312599f90d42a27ea2d9e4cc9256d205fb995e4252e00630307fe40e8ddf040b045c7e43d7f34c57fde7383a8a50aaf6261f8e2cf2053f59f9f4abbc3dabf94d36f2a2862ddfa63", @ANYRES32=0x0, @ANYRES32=<r8=>0x0], &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7a, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b005)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000000)={r8}, 0x8)

14:26:15 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, <r8=>0x0}, &(0x7f0000000280)=0x5)
setuid(r8)
r9 = getpid()
sched_setscheduler(r9, 0x5, &(0x7f0000000380))
r10 = getpid()
sched_setscheduler(r10, 0x5, &(0x7f0000000380))
sendmsg$nl_netfilter(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540800000e0a050027bd7000fbdbdf250500000408005c00", @ANYRES32=r8, @ANYBLOB="792132e02067ea909301ecd81904a2f59e91a43c0213853b2ff8c5496fd633768a358eb7632413a7acd36636e266ed4cacfb3cb54f7660d62cdaafaf7f3e1212879294114a38d84da3f48a575d9e2385aac6df1c09f95dacccd9aa0657c0d78717c82de655e6e91a2ea0fe806d8bc7bb30ac81f0826e6fe1f6fedc5f9b9b7343ef03c5b1bdef95915ff29e08de938b561f772990b816104fc3111a958d26df37b9d57cf336ec4cccba91b6139003effef705227f922174cd3a266b7c1346503c3a77c52f481f1992bca4a1bef503534ecc20f13c064335437294016c80d3253e0ceab1f18c3aead778e3da0c0fddca156269fb7a9a1e604c602dcefdb0bcb47a25cf04d1c3b0ba5b083ed252966b0ce97bd3bf15e736969789b250963b6ea4f16244a891b1b54c6e3babe8b0dfaa5db01a7d4eb33db4e01722a0413cce557d334a64f208c885f75ca52477ee644e111e7f04a27cec9d9a9e4fd59ff537b2d4ce98b40018561927d233f1252c81f2ee88cc4e671592f5b596229c02533eb9c02e9a13cb02da38d9293a80f77152f2fb948d6083f64b779e23e2e61ea6d17c91772f98e7b16098b03c8729ca10d80b6994654de17aff0e9f575474a15893d37e66a7868b23703a452703ed52c9b7cc13138887c25280f53a8464a9f332399795555f84a2a57b458d7dfe787f52ce79f70454758e30dc72cae7aaa86501941ded1d26d36a6c193a03504a8853935be7ba5f6d37c9d46971a4b3157ab7980679cf1085be535a3e563bf6412ba8b8bcef8c817b91a7663dd64ebfc439cabab205e3258fe24481bee5c1a9f79ea7f13e0383f6c2e241a6293dc58c627ef84ffdf7990944718a2e3fda51e9243166ab9a08000900", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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"], 0x854}, 0x1, 0x0, 0x0, 0x20000004}, 0x80)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
splice(r0, 0x0, r11, 0x0, 0x1, 0x6)

14:26:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xfd030000, 0x0)

14:26:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xa10000, 0xd71, 0x6, <r4=>r3, 0x0, &(0x7f0000000080)={0x9e0904, 0x4, [], @p_u8=&(0x7f0000000340)=0x40}})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0x60000010})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b0070b6abb2e4befbe75044e393c6c801dfd4d5af282624ff48a14487ccd470bc34418e61b5fc8492d49fdb3bd82624abd0a60d6f7baec1f3af4fd83a3797c5028141a59caf7afefb31a792487153e644727adf49b242dc5236d7cbe794e7295bc7890000000000"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x4)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x7, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300))

14:26:15 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f03a", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
fcntl$setpipe(r3, 0x407, 0xfff)
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000014000100000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="1400060003000000ff070000000020000000000014000200fc0100"/40], 0x40}}, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000240)={@initdev, @remote, <r4=>0x0}, &(0x7f0000000180)=0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0002000000000000280012000900010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000014000100000000000000000002000000", @ANYRES32=r8, @ANYBLOB="1400060003000000ff07000000000000000000243db63cf0b63c3b00"/40], 0x40}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x84, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x90d1}, 0x880)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000200), 0x0)

14:26:15 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xfeffffff, 0x0)

[  496.359333][T18353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  496.416173][T18363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
14:26:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xfffffffe, 0x0)

[  496.461470][T18363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
14:26:16 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:16 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f03b", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x4000000000000, 0x0)

14:26:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
r2 = open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6329ab"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
setsockopt$inet_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000300)="55ab023169c9f8430544970c6355b4c3a55640c0fd3425c0673bd3983e6c0ae788d1651fcc951711b8d0912210340ea0fd7843d2cd4364e964b6f351bfe203dc1eacbb349f0ade917ae89ab8e7b5a8a6fe1bdc56464be63bb7aa55e648c13e7afa45313b270f47598769bd5df21694b5eb96e83cb546e900fad68e9b41084202762f2f4b3b5bbeb30e486bb0", 0x8c)

14:26:16 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_usb_disconnect(r0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r3, &(0x7f0000001580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, "c09893e1", "00eac917"}}, 0x0}, 0x0)
shutdown(0xffffffffffffffff, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
pipe(&(0x7f00000002c0))
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES64=r6, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0})
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x800)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x15, 0x8, 0xe, 0x8, 0x9, 0x0, 0x0, 0x14, 0x1})
write$P9_RFSYNC(r7, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7)

14:26:16 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_aout(r0, &(0x7f00000011c0)=ANY=[], 0x20)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000))
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040))
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0)
pipe(&(0x7f00000002c0)={<r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r9 = accept4(r8, 0x0, 0x0, 0x0)
splice(r7, 0x0, r9, 0x0, 0x80000001, 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x0, 0x6)

14:26:16 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f03c", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:16 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x100000000000000, 0x0)

14:26:17 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f03d", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  497.514728][ T3863] usb 1-1: new high-speed USB device number 9 using dummy_hcd
14:26:17 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f03e", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:17 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x203000000000000, 0x0)

14:26:17 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f041", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

[  497.784821][ T3863] usb 1-1: Using ep0 maxpacket: 16
[  497.915662][ T3863] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  497.948233][ T3863] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  497.979487][ T3863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.997795][ T3863] usb 1-1: config 0 descriptor??
[  498.036801][ T3863] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  498.248120][ T8912] usb 1-1: USB disconnect, device number 9
14:26:17 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:17 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x400000000000000, 0x0)

14:26:17 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f042", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:17 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r4=>r3, 0x1, 0x6, 0x3})
ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0)
r5 = dup(r2)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
splice(r6, 0x0, r8, 0x0, 0x80000001, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r0, 0x0, r9, 0x0, 0x1, 0x6)

[  498.862673][ T8912] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  499.124686][ T8912] usb 1-1: Using ep0 maxpacket: 32
[  499.271791][ T8912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  499.288678][ T8912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  499.314087][ T8912] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[  499.334402][ T8912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.356758][ T8912] usb 1-1: config 0 descriptor??
[  499.415955][ T8912] hub 1-1:0.0: USB hub found
[  499.628818][ T8912] hub 1-1:0.0: 1 port detected
[  500.070400][ T8912] usb 1-1: USB disconnect, device number 10
[  500.834550][ T8748] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  501.074541][ T8748] usb 1-1: Using ep0 maxpacket: 16
[  501.195182][ T8748] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  501.208196][ T8748] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  501.218540][ T8748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.233288][ T8748] usb 1-1: config 0 descriptor??
[  501.275822][ T8748] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
14:26:20 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x602000000000000, 0x0)

14:26:20 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f043", 0x30, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:20 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_script(r5, 0x0, 0xfffffcaa)
ioctl$FIOCLEX(r5, 0x5451)
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)

14:26:20 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x1d9, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}, @srh={0x2, 0xc, 0x4, 0x6, 0x1, 0x30, 0xfffd, [@private1={0xfc, 0x1, [], 0x1}, @private0={0xfc, 0x0, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, [], 0x1}, @private1={0xfc, 0x1, [], 0x1}, @empty]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x20b)
socket$pptp(0x18, 0x1, 0x2)

14:26:20 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0b6300000400000000000000610f6444df817f6b4f3353f4ae644157e5b985963c48ef2900"], 0x0, 0x0, 0x0})
r2 = dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80800)
r5 = mmap$binder(&(0x7f0000000000/0x5000)=nil, 0x5000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x3}, @acquire, @exit_looper, @exit_looper, @free_buffer={0x40086303, r5}], 0x1000, 0x0, &(0x7f0000000300)="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"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x64, 0x0, &(0x7f0000000340)=[@decrefs={0x40046307, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x0, 0x2, 0x37}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000300)={0x0, 0x18, 0x38}}, 0x400}, @enter_looper, @free_buffer={0x40086303, r5}], 0x9c, 0x0, &(0x7f0000000440)="ecb45ad220e8fbcaf1f258759ddf1e2391a33d448e44bdb0a93d83160d7232661cdaf8cfa24751d002d1fccf6591885a97c09a600668c92598c47b8abef4db1106fbcde894801562e46c06561e44bce7faaeb639956402caee496ce4b23923e2d0e6715a31b8f4778eb7cfd8275f626323a81eb83f75c12c76f7055fd4835adbfcb686fb862578d0a83f29c4c5de5e64f4636a9f17bebacd0507ed0b"})
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x71)

[  501.380288][ T8912] usb 1-1: USB disconnect, device number 11
14:26:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x301001, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@private2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x5}}, {{@in=@dev, 0x0, 0x3c}, 0x0, @in6=@private1}}, 0xe8)
listen(r0, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_script(r1, 0x0, 0xfffffcaa)
r2 = pidfd_getfd(r1, r0, 0x0)
ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x30)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
r5 = geteuid()
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, <r7=>0x0}, &(0x7f0000000280)=0x5)
setuid(r7)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000780)=[{&(0x7f0000000100)="8c884fde4cc788423ac6365e6a7fdb5965b76ab529a5e79e14155bac2571c9986b41233121f45ba5dc70776bd5c75f5e9e184da666faefb4edf56a1c986beb6e8776b7f19d4940af84d6a7742d4e0206e4cf3d0978fbc18c3cfa694b923a031bf55b0cb8168f142f569e199732dd5318f1d5da910e0bf3e718b7375b451cc76715fbcb482c839c9dada91de05aafa63eeeb522ea3cf645639498507ef3ed978e144e891064f24f546fd7f02757cfde25f2cac87a1f9cc4d9d8554e8231968cf88f09d9034e3037ef78d4f8ae836600dac8bcd3d3c66cbd15bdf5bfe3724b91590fdffc4c", 0xe4}, {&(0x7f00000003c0)="c01e273cc17c0390e65d451f5b3817c221fd8b69b548df8c9609211822e8f80765dcc5388e034bef8544fac2c1291027ee18eef974e7674b09b8aaa0e9cbc5f846272260e4b61d521801b02d110458d57b23574a3fb0bd8eb13b875af4043380fb10181517abad8141cbd762c9f5d9b20f083e4fb65ddd96b92e59571171fd5fc16a3d4edbf6efc96cff630d36e7c1670a959ac96a43b9d2471d9835a59863250f635ce0304c79052100bf763e223c5bd05c6b9484daadf885e2278aa170928f45c5301fde9c8de11a06c4680d54235c", 0xd0, 0x2}, {&(0x7f00000004c0)="957cef12f40fcae58130555956122cac8cd286ce45360842ab67224728f519a14a3d150ba520925d09bd07e0cce255c7a52418285363f2c6aea06e730b9283313798dc0cd72b4bfe85c109315f6921e809b76614cbd1804defa46b99b2e2edd5f75307ffc8bc67ce6febc788a956747cfcc4f8acb7704a7ea256f2b905f18047b037c57132565b4db9f1ab8d83cd3b00c96349", 0x93, 0x71}, {&(0x7f0000000580)="fca29ffb8cce0953199d8f2b381d8ee398b56ec793c05e16f86b26cdaa853233d6ba1c1a20ea605b08eaa65e2d3cd2f4f96882916038420d4c229b0280be7b4ecb67a6036aa26a406efa14c9b1891e5f71795317b67081a4b3c79bdade227fc94c1439a946f8aa1af4beac6dba8f79fc5292677225a487e2fa0dc70140c74c1dc16c0ef7f4b956226bf2df25230517c98516aa3b8c86345b6e39b8e2dcfdaa9e6ee030dfd70a17677dc33ae2ed06704c99fd5c4cab5735a0e6b0819a81b658962aef72faeb58e89d0444a678fc720b6c737b9fc0a9", 0xd5, 0xcb}, {&(0x7f0000000680)="3759e1b83671c9e2c3dba740f61a3fc07e2f7a81f5102e0d7de4cd6a6d1d6eb77c1442cbadc896d38562d1017ad7c6ce7fb963ffed8f81d0c9cb1543adb71a510c88587f1cb9d14b6aff00c4311e14d1a792178cd76f32229a8e6c0d437cda50931c34aa2611439bbf9c0151551bfe90d69066761528453579cc0a64d4c7d9b9c86d15cf56ead0e5cad8b525c5fa9c485fcea442030215465cb850db8013784f294366954c3aba423cbd889270ed10a4232c4d0ee51318f578cc608d2e3bf57f71ab4d5fc3a3c16eadbffcdecc4827a12ec97c0a6e12fadecf7f75d1e6977e973f", 0xe1, 0x1f315f3c}], 0x83000, &(0x7f0000000900)={[{@numtail='nonumtail=0'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}], [{@uid_lt={'uid<', r7}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@subj_user={'subj_user', 0x3d, '\\\'}{\\%\'&!:.{'}}, {@fowner_lt={'fowner<', r4}}, {@euid_lt={'euid<', r5}}, {@uid_gt={'uid>', r7}}, {@fowner_gt={'fowner>', r9}}]})
syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000040000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0)

14:26:21 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xc03000000000000, 0x0)

14:26:21 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x2, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="eb660000"], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:21 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)=""/30, 0x1e)

14:26:21 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0xe01000000000000, 0x0)

14:26:21 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
r5 = socket$inet6(0xa, 0x802, 0x0)
connect$inet6(r5, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x4240a2a0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$binfmt_script(r6, 0x0, 0xfffffcaa)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'vcan0\x00', {}, 0x3})
ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000000))
splice(r2, 0x0, r4, 0x0, 0x100000, 0x4)

14:26:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x81000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:21 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x7, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:21 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f00000011c0)=ANY=[], 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r4, &(0x7f00003cef9f)='7', 0xfffa, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, <r6=>0x0]}, &(0x7f0000a8a000)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b005)
getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r6, 0x7}, &(0x7f0000000140)=0x8)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0)
ioctl$HIDIOCGCOLLECTIONINFO(r8, 0xc0104811, &(0x7f0000000080)={0x0, 0xffffffff, 0x7, 0x2})
write$binfmt_script(r7, 0x0, 0xfffffcaa)
ioctl$RTC_UIE_ON(r7, 0x7003)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
splice(r0, 0x0, r9, 0x0, 0x1, 0x6)

14:26:22 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x8, 0x3a, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:22 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1200000000000000, 0x0)

14:26:22 executing program 4:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)={0x401, 0x104, 0xe}, 0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
dup(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000000200), 0x0)

14:26:22 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x60, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x149301, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
accept4(r2, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2)
getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = dup(r3)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @loopback}})
write$tun(r1, &(0x7f0000000600)={@void, @val={0x0, 0x0, 0x2, 0x40}, @ipv6=@dccp_packet={0xe, 0x6, "81f080", 0x171, 0x21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @empty, {[@routing={0x5e, 0xa, 0x2, 0x4b, 0x0, [@private1, @private0, @private1={0xfc, 0x1, [], 0x1}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @private2]}, @fragment={0x0, 0x0, 0x1f, 0x0, 0x0, 0x9, 0x68}, @routing={0x87, 0x12, 0x1, 0x6b, 0x0, [@remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00', @private0, @loopback, @ipv4={[], [], @private=0xa010102}]}], {{0x4e20, 0x4e24, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x2, "433f9d", 0x2, "75ca95"}, "df812eb2ecb1b7fe68bd1409b6d3b2b5b334252d28715e6b0731ce0d071a49bc54954d21dbc9ce52c6590d94860b0546b059268764de0bb0b20d722a5b0841dde4ef94b94dd19818b9d632dfde255a4a9d606f57a7e4f9fe64a5b63e1de1474f6df7bb07973f51424b"}}}}, 0x1a3)
socket$pptp(0x18, 0x1, 0x2)

14:26:22 executing program 5:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_aout(r1, &(0x7f0000000140)=ANY=[], 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r0, 0x0, r4, 0x0, 0x1, 0x6)
pipe(&(0x7f00000002c0)={<r5=>0xffffffffffffffff})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x80000001, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000100)={r1})
bind$alg(r6, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r8 = accept4(r6, 0x0, 0x0, 0x0)
splice(r5, 0x0, r8, 0x0, 0x80000001, 0x0)
ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000080))
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_script(r9, 0x0, 0xfffffcaa)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r9, 0xc040564b, &(0x7f0000000000)={0xfffffff7, 0x0, 0x2021, 0x1, 0x4e, {0xffffffff, 0x665}})

14:26:22 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1402000000000000, 0x0)

14:26:22 executing program 2:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast=[0xff, 0xff, 0xff, 0x0], @random="f674049167a6", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a4f008", 0x30, 0x4, 0x0, @empty={[0x3, 0x3c]}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0004e6", 0x0, 0x0, 0x0, @remote, @remote}}}}}}}, 0x0)

14:26:22 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1a03000000000000, 0x0)

14:26:22 executing program 1:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc01, 0x3, 0x220, 0x0, 0x5002004a, 0x0, 0x0, 0x0, 0x188, 0x3c8, 0x3c8, 0x188, 0x3c8, 0x3, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'vlan0\x00', 'gretap0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xb8, 0xd8, 0x0, {}, [@common=@unspec=@helper={{0x48, 'helper\x00'}, {0x0, 'sane-20000\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x280)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
wait4(0x0, 0x0, 0x1d00000000000000, 0x0)

14:26:22 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x0)
open(&(0x7f0000000400)='./bus\x00', 0x1031fe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f00000001c0)=[@register_looper], 0x0, 0x0, 0x0})
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_script(r3, 0x0, 0xfffffcaa)
ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000300))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00')
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="03f225bd7000ffdbdf2508527f000800390081008000"], 0x1c}, 0x1, 0x0, 0x0, 0x10000090}, 0xc000)
dup(r1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_dccp(0xa, 0x6, 0x0)
fchmod(0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x400000000}, &(0x7f0000000200), 0x0)

14:26:22 executing program 0:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x200})
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
unshare(0x40000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x3a)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x1, @mcast2}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x9, 0x0, 0x0, 0x204, 0x0, 0x0, 0x6, 0x1]}, 0x5c)
setsockopt$inet6_int(r1, 0x29, 0xc8, &(0x7f00000007c0), 0x4)
setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x4e24, 0x3a, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0xa, 0x0, 0x0, @mcast1}}, 0x5c)
pipe(&(0x7f00000002c0)={<r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80000001, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000040)={0x68, r6, 0x8b8e0eb13081c495, 0x0, 0x0, {{}, {0x0, 0x4109}, {0x4c, 0x18, {0xf0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8800)

[  502.842261][T18650] ==================================================================
[  502.850804][T18650] BUG: KASAN: slab-out-of-bounds in __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.859311][T18650] Read of size 8 at addr ffff8880a68089f8 by task syz-executor.2/18650
[  502.867568][T18650] CPU: 1 PID: 18650 Comm: syz-executor.2 Not tainted 5.8.0-rc5-next-20200716-syzkaller #0
[  502.877463][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  502.887529][T18650] Call Trace:
[  502.890847][T18650]  dump_stack+0x18f/0x20d
[  502.895195][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.901034][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.906866][T18650]  print_address_description.constprop.0.cold+0xae/0x497
[  502.913900][T18650]  ? __xfrm6_tunnel_spi_lookup+0x142/0x3b0
[  502.919728][T18650]  ? lockdep_hardirqs_off+0x66/0xa0
[  502.924943][T18650]  ? vprintk_func+0x97/0x1a6
[  502.929547][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.935362][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.941180][T18650]  kasan_report.cold+0x1f/0x37
[  502.941800][T18653] IPVS: ftp: loaded support on port[0] = 21
[  502.945950][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.945990][T18650]  __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  502.946011][T18650]  xfrm6_tunnel_spi_lookup+0x8a/0x1d0
[  502.946032][T18650]  xfrmi6_rcv_tunnel+0xb9/0x100
[  502.946058][T18650]  tunnel46_rcv+0xef/0x2b0
[  502.977942][T18650]  ip6_protocol_deliver_rcu+0x2e8/0x1670
[  502.983602][T18650]  ip6_input_finish+0x7f/0x160
[  502.988379][T18650]  ip6_input+0x9c/0xd0
[  502.992465][T18650]  ip6_mc_input+0x411/0xea0
[  502.996977][T18650]  ? ip6_input+0xd0/0xd0
[  503.001236][T18650]  ? lock_is_held_type+0xb0/0xe0
[  503.006182][T18650]  ipv6_rcv+0x28e/0x3c0
[  503.010340][T18650]  ? ip6_rcv_core+0x1bb0/0x1bb0
[  503.015235][T18650]  __netif_receive_skb_one_core+0x114/0x180
[  503.021140][T18650]  ? __netif_receive_skb_core+0x3690/0x3690
[  503.027042][T18650]  ? lockdep_hardirqs_on+0x6a/0xe0
[  503.032165][T18650]  ? read_seqcount_begin.constprop.0+0x139/0x1f0
[  503.038500][T18650]  ? ktime_get_with_offset+0x130/0x1a0
[  503.043970][T18650]  __netif_receive_skb+0x27/0x1c0
[  503.049004][T18650]  netif_receive_skb+0x159/0x990
[  503.053949][T18650]  ? __netif_receive_skb+0x1c0/0x1c0
[  503.059272][T18650]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[  503.065265][T18650]  ? __lockdep_free_key_range+0x110/0x110
[  503.070997][T18650]  tun_rx_batched.isra.0+0x460/0x720
[  503.076290][T18650]  ? tun_get_user+0x197f/0x35b0
[  503.081149][T18650]  ? tun_sock_write_space+0x1d0/0x1d0
[  503.086527][T18650]  ? lock_release+0x8d0/0x8d0
[  503.091210][T18650]  ? lock_downgrade+0x820/0x820
[  503.096149][T18650]  ? eth_type_trans+0x360/0x690
[  503.101014][T18650]  ? __local_bh_enable_ip+0x159/0x250
[  503.106474][T18650]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  503.112466][T18650]  ? tun_get_user+0x231f/0x35b0
[  503.117594][T18650]  ? trace_hardirqs_on+0x5f/0x220
[  503.122632][T18650]  tun_get_user+0x23b2/0x35b0
[  503.127330][T18650]  ? lock_acquire+0x1f1/0xad0
[  503.132013][T18650]  ? tun_build_skb+0xf30/0xf30
[  503.136786][T18650]  ? tun_get+0x160/0x280
[  503.141060][T18650]  tun_chr_write_iter+0xba/0x151
[  503.146007][T18650]  new_sync_write+0x422/0x650
[  503.150697][T18650]  ? new_sync_read+0x6e0/0x6e0
[  503.155476][T18650]  ? lock_downgrade+0x820/0x820
[  503.160342][T18650]  ? apparmor_file_permission+0x26e/0x4e0
[  503.166083][T18650]  vfs_write+0x5c6/0x6f0
[  503.170337][T18650]  ksys_write+0x12d/0x250
[  503.174675][T18650]  ? __ia32_sys_read+0xb0/0xb0
[  503.179452][T18650]  ? lock_is_held_type+0xb0/0xe0
[  503.184398][T18650]  ? do_syscall_64+0x1c/0xe0
[  503.188999][T18650]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  503.194993][T18650]  do_syscall_64+0x60/0xe0
[  503.199420][T18650]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  503.205320][T18650] RIP: 0033:0x415c91
[  503.209208][T18650] Code: Bad RIP value.
[  503.213274][T18650] RSP: 002b:00007f60a8cd1c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  503.221697][T18650] RAX: ffffffffffffffda RBX: 000000000078bf00 RCX: 0000000000415c91
[  503.229671][T18650] RDX: 0000000000000066 RSI: 0000000020000180 RDI: 00000000000000f0
[  503.237647][T18650] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
[  503.245625][T18650] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000078bf0c
[  503.253599][T18650] R13: 00007ffd213177cf R14: 00007f60a8cd29c0 R15: 000000000078bf0c
[  503.261623][T18650] Allocated by task 7022:
[  503.265974][T18650]  kasan_save_stack+0x1b/0x40
[  503.270661][T18650]  __kasan_kmalloc.constprop.0+0xbf/0xd0
[  503.276296][T18650]  __kmalloc+0x1a8/0x320
[  503.280543][T18650]  ops_init+0xfb/0x470
[  503.284619][T18650]  setup_net+0x2d8/0x850
[  503.288866][T18650]  copy_net_ns+0x2cf/0x5e0
[  503.293289][T18650]  create_new_namespaces+0x3f6/0xb10
[  503.298579][T18650]  unshare_nsproxy_namespaces+0xbd/0x1f0
[  503.304219][T18650]  ksys_unshare+0x445/0x8e0
[  503.308727][T18650]  __x64_sys_unshare+0x2d/0x40
[  503.313495][T18650]  do_syscall_64+0x60/0xe0
[  503.317918][T18650]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  503.323818][T18650] The buggy address belongs to the object at ffff8880a6808800
[  503.323818][T18650]  which belongs to the cache kmalloc-512 of size 512
[  503.337872][T18650] The buggy address is located 504 bytes inside of
[  503.337872][T18650]  512-byte region [ffff8880a6808800, ffff8880a6808a00)
[  503.351145][T18650] The buggy address belongs to the page:
[  503.356788][T18650] page:00000000b033ada4 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880a6808c00 pfn:0xa6808
[  503.368243][T18650] flags: 0xfffe0000000200(slab)
[  503.373103][T18650] raw: 00fffe0000000200 ffffea00024a6688 ffffea00023f97c8 ffff8880aa000600
[  503.381709][T18650] raw: ffff8880a6808c00 ffff8880a6808000 0000000100000002 0000000000000000
[  503.390287][T18650] page dumped because: kasan: bad access detected
[  503.396703][T18650] Memory state around the buggy address:
[  503.402340][T18650]  ffff8880a6808880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  503.410408][T18650]  ffff8880a6808900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc
[  503.418482][T18650] >ffff8880a6808980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  503.426542][T18650]                                                                 ^
[  503.434604][T18650]  ffff8880a6808a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  503.442672][T18650]  ffff8880a6808a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  503.450732][T18650] ==================================================================
[  503.458794][T18650] Disabling lock debugging due to kernel taint
[  503.465062][T18650] Kernel panic - not syncing: panic_on_warn set ...
[  503.471667][T18650] CPU: 1 PID: 18650 Comm: syz-executor.2 Tainted: G    B             5.8.0-rc5-next-20200716-syzkaller #0
[  503.482935][T18650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  503.492986][T18650] Call Trace:
[  503.496282][T18650]  dump_stack+0x18f/0x20d
[  503.500616][T18650]  ? __xfrm6_tunnel_spi_lookup+0x2f0/0x3b0
[  503.506420][T18650]  panic+0x2e3/0x75c
[  503.510324][T18650]  ? __warn_printk+0xf3/0xf3
[  503.514921][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  503.520742][T18650]  ? trace_hardirqs_on+0x55/0x220
[  503.525773][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  503.531576][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  503.537385][T18650]  end_report+0x4d/0x53
[  503.541572][T18650]  kasan_report.cold+0xd/0x37
[  503.546251][T18650]  ? __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  503.552058][T18650]  __xfrm6_tunnel_spi_lookup+0x3a9/0x3b0
[  503.557696][T18650]  xfrm6_tunnel_spi_lookup+0x8a/0x1d0
[  503.563071][T18650]  xfrmi6_rcv_tunnel+0xb9/0x100
[  503.567925][T18650]  tunnel46_rcv+0xef/0x2b0
[  503.572342][T18650]  ip6_protocol_deliver_rcu+0x2e8/0x1670
[  503.577984][T18650]  ip6_input_finish+0x7f/0x160
[  503.582749][T18650]  ip6_input+0x9c/0xd0
[  503.586818][T18650]  ip6_mc_input+0x411/0xea0
[  503.591323][T18650]  ? ip6_input+0xd0/0xd0
[  503.595569][T18650]  ? lock_is_held_type+0xb0/0xe0
[  503.600509][T18650]  ipv6_rcv+0x28e/0x3c0
[  503.604666][T18650]  ? ip6_rcv_core+0x1bb0/0x1bb0
[  503.609522][T18650]  __netif_receive_skb_one_core+0x114/0x180
[  503.615416][T18650]  ? __netif_receive_skb_core+0x3690/0x3690
[  503.621316][T18650]  ? lockdep_hardirqs_on+0x6a/0xe0
[  503.626433][T18650]  ? read_seqcount_begin.constprop.0+0x139/0x1f0
[  503.632768][T18650]  ? ktime_get_with_offset+0x130/0x1a0
[  503.638219][T18650]  __netif_receive_skb+0x27/0x1c0
[  503.643233][T18650]  netif_receive_skb+0x159/0x990
[  503.648160][T18650]  ? __netif_receive_skb+0x1c0/0x1c0
[  503.653434][T18650]  ? lockdep_hardirqs_on_prepare+0x590/0x590
[  503.659407][T18650]  ? __lockdep_free_key_range+0x110/0x110
[  503.665120][T18650]  tun_rx_batched.isra.0+0x460/0x720
[  503.670392][T18650]  ? tun_get_user+0x197f/0x35b0
[  503.675246][T18650]  ? tun_sock_write_space+0x1d0/0x1d0
[  503.680607][T18650]  ? lock_release+0x8d0/0x8d0
[  503.685276][T18650]  ? lock_downgrade+0x820/0x820
[  503.690114][T18650]  ? eth_type_trans+0x360/0x690
[  503.694958][T18650]  ? __local_bh_enable_ip+0x159/0x250
[  503.700317][T18650]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  503.706285][T18650]  ? tun_get_user+0x231f/0x35b0
[  503.711123][T18650]  ? trace_hardirqs_on+0x5f/0x220
[  503.716138][T18650]  tun_get_user+0x23b2/0x35b0
[  503.720812][T18650]  ? lock_acquire+0x1f1/0xad0
[  503.725477][T18650]  ? tun_build_skb+0xf30/0xf30
[  503.730246][T18650]  ? tun_get+0x160/0x280
[  503.734487][T18650]  tun_chr_write_iter+0xba/0x151
[  503.739428][T18650]  new_sync_write+0x422/0x650
[  503.744097][T18650]  ? new_sync_read+0x6e0/0x6e0
[  503.748855][T18650]  ? lock_downgrade+0x820/0x820
[  503.753698][T18650]  ? apparmor_file_permission+0x26e/0x4e0
[  503.759415][T18650]  vfs_write+0x5c6/0x6f0
[  503.763653][T18650]  ksys_write+0x12d/0x250
[  503.767971][T18650]  ? __ia32_sys_read+0xb0/0xb0
[  503.772724][T18650]  ? lock_is_held_type+0xb0/0xe0
[  503.777649][T18650]  ? do_syscall_64+0x1c/0xe0
[  503.782227][T18650]  ? lockdep_hardirqs_on_prepare+0x3a2/0x590
[  503.788198][T18650]  do_syscall_64+0x60/0xe0
[  503.792623][T18650]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  503.798503][T18650] RIP: 0033:0x415c91
[  503.802376][T18650] Code: Bad RIP value.
[  503.806428][T18650] RSP: 002b:00007f60a8cd1c60 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  503.814831][T18650] RAX: ffffffffffffffda RBX: 000000000078bf00 RCX: 0000000000415c91
[  503.822790][T18650] RDX: 0000000000000066 RSI: 0000000020000180 RDI: 00000000000000f0
[  503.830746][T18650] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000
[  503.838966][T18650] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000078bf0c
[  503.846924][T18650] R13: 00007ffd213177cf R14: 00007f60a8cd29c0 R15: 000000000078bf0c
[  503.855960][T18650] Kernel Offset: disabled
[  503.860278][T18650] Rebooting in 86400 seconds..