syzkaller login: [ 264.508039][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 264.558803][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. [ 264.620756][ T1859] netlink: 4 bytes leftover after parsing attributes in process `dhcpcd'. Warning: Permanently added '[localhost]:61003' (ECDSA) to the list of known hosts. 1970/01/01 00:05:38 fuzzer started 1970/01/01 00:05:50 dialing manager at localhost:42307 [ 356.334586][ T2026] cgroup: Unknown subsys name 'net' [ 357.487339][ T2026] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:05:57 syscalls: 2918 1970/01/01 00:05:57 code coverage: enabled 1970/01/01 00:05:57 comparison tracing: enabled 1970/01/01 00:05:57 extra coverage: enabled 1970/01/01 00:05:57 delay kcov mmap: mmap returned an invalid pointer 1970/01/01 00:05:57 setuid sandbox: enabled 1970/01/01 00:05:57 namespace sandbox: enabled 1970/01/01 00:05:57 Android sandbox: /sys/fs/selinux/policy does not exist 1970/01/01 00:05:57 fault injection: enabled 1970/01/01 00:05:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 1970/01/01 00:05:57 net packet injection: enabled 1970/01/01 00:05:57 net device setup: enabled 1970/01/01 00:05:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 1970/01/01 00:05:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 1970/01/01 00:05:57 NIC VF setup: PCI device 0000:00:11.0 is not available 1970/01/01 00:05:57 USB emulation: enabled 1970/01/01 00:05:57 hci packet injection: /dev/vhci does not exist 1970/01/01 00:05:57 wifi device emulation: /sys/class/mac80211_hwsim/ does not exist 1970/01/01 00:05:57 802.15.4 emulation: /sys/bus/platform/devices/mac802154_hwsim does not exist 1970/01/01 00:05:57 fetching corpus: 0, signal 0/2000 (executing program) 1970/01/01 00:06:01 fetching corpus: 50, signal 31953/35107 (executing program) 1970/01/01 00:06:04 fetching corpus: 99, signal 44616/48776 (executing program) 1970/01/01 00:06:08 fetching corpus: 149, signal 53473/58527 (executing program) 1970/01/01 00:06:11 fetching corpus: 199, signal 60433/66231 (executing program) 1970/01/01 00:06:14 fetching corpus: 249, signal 65167/71740 (executing program) 1970/01/01 00:06:18 fetching corpus: 298, signal 73057/80006 (executing program) 1970/01/01 00:06:21 fetching corpus: 348, signal 77319/84785 (executing program) 1970/01/01 00:06:24 fetching corpus: 398, signal 81537/89449 (executing program) 1970/01/01 00:06:29 fetching corpus: 448, signal 88132/96049 (executing program) 1970/01/01 00:06:32 fetching corpus: 498, signal 91598/99802 (executing program) 1970/01/01 00:06:34 fetching corpus: 548, signal 94971/103282 (executing program) 1970/01/01 00:06:38 fetching corpus: 598, signal 98579/106961 (executing program) 1970/01/01 00:06:41 fetching corpus: 648, signal 100558/109205 (executing program) 1970/01/01 00:06:43 fetching corpus: 698, signal 103476/112098 (executing program) 1970/01/01 00:06:46 fetching corpus: 748, signal 105360/114174 (executing program) 1970/01/01 00:06:50 fetching corpus: 798, signal 108630/117224 (executing program) 1970/01/01 00:06:53 fetching corpus: 848, signal 110741/119348 (executing program) 1970/01/01 00:06:56 fetching corpus: 898, signal 113025/121510 (executing program) 1970/01/01 00:06:59 fetching corpus: 947, signal 114956/123369 (executing program) 1970/01/01 00:07:02 fetching corpus: 997, signal 117511/125584 (executing program) 1970/01/01 00:07:04 fetching corpus: 1047, signal 119640/127439 (executing program) 1970/01/01 00:07:06 fetching corpus: 1097, signal 121452/129066 (executing program) 1970/01/01 00:07:09 fetching corpus: 1146, signal 123407/130659 (executing program) 1970/01/01 00:07:12 fetching corpus: 1196, signal 125761/132552 (executing program) 1970/01/01 00:07:16 fetching corpus: 1246, signal 127930/134187 (executing program) 1970/01/01 00:07:19 fetching corpus: 1296, signal 129807/135654 (executing program) 1970/01/01 00:07:21 fetching corpus: 1346, signal 131197/136718 (executing program) 1970/01/01 00:07:24 fetching corpus: 1396, signal 132413/137642 (executing program) 1970/01/01 00:07:27 fetching corpus: 1446, signal 134251/138887 (executing program) 1970/01/01 00:07:30 fetching corpus: 1496, signal 135297/139646 (executing program) 1970/01/01 00:07:33 fetching corpus: 1546, signal 137228/140841 (executing program) 1970/01/01 00:07:36 fetching corpus: 1596, signal 139079/141966 (executing program) 1970/01/01 00:07:39 fetching corpus: 1646, signal 142261/143749 (executing program) 1970/01/01 00:07:40 fetching corpus: 1664, signal 142750/144059 (executing program) 1970/01/01 00:07:40 fetching corpus: 1664, signal 142750/144105 (executing program) 1970/01/01 00:07:40 fetching corpus: 1664, signal 142750/144156 (executing program) 1970/01/01 00:07:41 fetching corpus: 1664, signal 142750/144202 (executing program) 1970/01/01 00:07:41 fetching corpus: 1664, signal 142750/144247 (executing program) 1970/01/01 00:07:41 fetching corpus: 1664, signal 142750/144306 (executing program) 1970/01/01 00:07:41 fetching corpus: 1664, signal 142750/144351 (executing program) 1970/01/01 00:07:41 fetching corpus: 1664, signal 142750/144404 (executing program) 1970/01/01 00:07:41 fetching corpus: 1664, signal 142750/144446 (executing program) 1970/01/01 00:07:42 fetching corpus: 1664, signal 142750/144496 (executing program) 1970/01/01 00:07:42 fetching corpus: 1664, signal 142750/144536 (executing program) 1970/01/01 00:07:42 fetching corpus: 1664, signal 142750/144576 (executing program) 1970/01/01 00:07:42 fetching corpus: 1665, signal 142793/144643 (executing program) 1970/01/01 00:07:42 fetching corpus: 1665, signal 142793/144701 (executing program) 1970/01/01 00:07:42 fetching corpus: 1665, signal 142793/144757 (executing program) 1970/01/01 00:07:42 fetching corpus: 1665, signal 142793/144804 (executing program) 1970/01/01 00:07:42 fetching corpus: 1665, signal 142793/144838 (executing program) 1970/01/01 00:07:43 fetching corpus: 1665, signal 142793/144881 (executing program) 1970/01/01 00:07:43 fetching corpus: 1665, signal 142793/144925 (executing program) 1970/01/01 00:07:43 fetching corpus: 1665, signal 142793/144960 (executing program) 1970/01/01 00:07:43 fetching corpus: 1665, signal 142793/145002 (executing program) 1970/01/01 00:07:43 fetching corpus: 1665, signal 142793/145037 (executing program) 1970/01/01 00:07:44 fetching corpus: 1665, signal 142793/145083 (executing program) 1970/01/01 00:07:44 fetching corpus: 1665, signal 142793/145116 (executing program) 1970/01/01 00:07:44 fetching corpus: 1665, signal 142793/145146 (executing program) 1970/01/01 00:07:44 fetching corpus: 1665, signal 142793/145187 (executing program) 1970/01/01 00:07:44 fetching corpus: 1665, signal 142793/145236 (executing program) 1970/01/01 00:07:44 fetching corpus: 1665, signal 142793/145287 (executing program) 1970/01/01 00:07:45 fetching corpus: 1665, signal 142793/145321 (executing program) 1970/01/01 00:07:45 fetching corpus: 1665, signal 142793/145361 (executing program) 1970/01/01 00:07:45 fetching corpus: 1665, signal 142793/145400 (executing program) 1970/01/01 00:07:45 fetching corpus: 1665, signal 142793/145439 (executing program) 1970/01/01 00:07:45 fetching corpus: 1665, signal 142793/145478 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145514 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145544 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145587 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145642 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145690 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145719 (executing program) 1970/01/01 00:07:46 fetching corpus: 1665, signal 142793/145719 (executing program) 1970/01/01 00:09:32 starting 2 fuzzer processes 00:09:32 executing program 0: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000001980), 0x20001, 0x0) write$damon_contexts(r0, 0x0, 0x0) 00:09:33 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x426e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x20, 0x0, 0x8800000) [ 601.244650][ T2039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.620832][ T2039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.844577][ T2040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.023180][ T2040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.991941][ T2039] device hsr_slave_0 entered promiscuous mode [ 616.040257][ T2039] device hsr_slave_1 entered promiscuous mode [ 619.687215][ T2040] device hsr_slave_0 entered promiscuous mode [ 619.754207][ T2040] device hsr_slave_1 entered promiscuous mode [ 619.808897][ T2040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 619.813289][ T2040] Cannot create hsr debugfs directory [ 625.650690][ T2039] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 625.939780][ T2039] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 626.087435][ T2039] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 626.210607][ T2039] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 627.314480][ T2040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 627.617768][ T2040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 627.744446][ T2040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 627.874008][ T2040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 636.622138][ T2040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 636.890163][ T2039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.497315][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.574878][ T2310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 637.709391][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 637.780924][ T829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 643.934262][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 643.970637][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.400913][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 644.457514][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.473430][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.500625][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.518475][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.540373][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.818874][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 644.973579][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.159912][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.360308][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.121473][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.209214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.513330][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.562002][ T2102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.971947][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.020349][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.067381][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.099121][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.262671][ T2040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 647.428840][ T2039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.872204][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 652.901519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 653.523331][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 653.610649][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 664.879587][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 664.943995][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 666.751405][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 666.812178][ T2679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 671.723459][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 671.812649][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 671.899519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 671.971405][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 672.053680][ T2039] device veth0_vlan entered promiscuous mode [ 672.564527][ T2039] device veth1_vlan entered promiscuous mode [ 674.012293][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 674.069579][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 674.354137][ T2039] device veth0_macvtap entered promiscuous mode [ 674.549777][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 674.597395][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 674.644613][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 674.770267][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 674.792903][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 674.911878][ T2039] device veth1_macvtap entered promiscuous mode [ 675.079149][ T2040] device veth0_vlan entered promiscuous mode [ 675.470728][ T2040] device veth1_vlan entered promiscuous mode [ 675.740436][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 675.772783][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 675.793623][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 676.252104][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 676.274722][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 676.538443][ T2039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.540868][ T2039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.543362][ T2039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.544877][ T2039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 677.452027][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 677.491702][ T2027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 677.621038][ T2040] device veth0_macvtap entered promiscuous mode [ 677.928966][ T2040] device veth1_macvtap entered promiscuous mode [ 678.924436][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 679.033071][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 679.130656][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 679.756899][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 679.780333][ T2028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 679.934830][ T2040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.942515][ T2040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.943750][ T2040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.944849][ T2040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 00:11:22 executing program 0: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000001980), 0x20001, 0x0) write$damon_contexts(r0, 0x0, 0x0) 00:11:24 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x426e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x20, 0x0, 0x8800000) 00:11:25 executing program 0: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000001980), 0x20001, 0x0) write$damon_contexts(r0, 0x0, 0x0) 00:11:27 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x426e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x20, 0x0, 0x8800000) 00:11:27 executing program 0: r0 = openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000001980), 0x20001, 0x0) write$damon_contexts(r0, 0x0, 0x0) 00:11:30 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x426e1, 0x0) fallocate(r0, 0x0, 0x8000, 0x4) fallocate(r0, 0x20, 0x0, 0x8800000) 00:11:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 00:11:35 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 00:11:37 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:11:40 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 00:11:43 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x28, 0x13, 0xa, 0x3, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}}, 0x0) 00:11:46 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:11:51 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:11:53 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:11:55 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:11:58 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:11:59 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:03 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:04 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:07 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:09 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:11 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:12 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:16 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:20 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:23 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:26 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:29 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:33 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:37 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:40 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:44 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:47 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:49 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:52 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:55 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:57 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:12:59 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:01 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:03 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:06 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:07 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:11 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:12 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:15 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:17 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:21 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:21 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:25 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:28 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:31 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:33 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:39 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:40 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:45 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:46 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:49 executing program 1: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:50 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:52 executing program 0: io_setup(0x3, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f00000003c0), &(0x7f0000000440)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000180), 0x6ab0, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x20, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="08631040000000ff0000000000000000000000000663044000f27ff07deb69400d6300fecbc4f3e5e2390979a37e1faf73139e49457760a6335a4446a89eafb3cb81dfa5"], 0x1, 0x0, &(0x7f0000000180)="17"}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'team_slave_1\x00', &(0x7f0000000680)=ANY=[@ANYRES64=r1, @ANYBLOB="f6ae3c40751d829cd78e454bb7fb5aaf017df41f527679cbc5deb000103ead4eafae010000000000001e25cfe0ca24ae13f8a1cab7e6dbe91b0a90871160b0a64b30640344f44d1ce7667dcf2c866de7aa83939a95aa1edb30e809ed882b2aa008fe316e54a652cbbb7f0bd771de5d361dcac4e3f0217c0d998a1d57e759807da3874362a2cced7930cd127db7", @ANYBLOB="2d9881b4088a8a69eb8a20404ff77de74950e195c092593ee2a33a32539997116f511dabf4f8c153adcafd04028ac76e23ac42e6b79dbf3b4ef725666f7e098ccdc94a8b045be0c97e01dfb029821505194d21b51a4c6712f9ba6406eb0100000000000000f22270c14080c3f6ee8453b1fa2339ef7f022b7100673d205f0dce325d000000000000613f90a71f4e171ea48819b4b353a7b84f41e7db4b146fdff6345fdaf919b5a9320c8558b81115025c", @ANYRESHEX=r6, @ANYRES16=r2, @ANYRESDEC=r7]}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000500)={0x0, 'netdevsim0\x00', {}, 0x6}) r8 = dup3(r3, r5, 0x0) bind$unix(r2, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xff71) io_setup(0x53, &(0x7f0000000040)=0x0) r10 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001480), 0x2) read(r10, &(0x7f00000014c0)=""/4096, 0x1000) readv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/50, 0x32}], 0x1) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r11, 0x0, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000990000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_submit(r12, r13, &(0x7f0000002300)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r14, 0x0, 0x0}, 0x0) sendfile(r14, r8, &(0x7f0000000380)=0x4, 0x7fffffffffffffff) io_pgetevents(0x0, 0x80000, 0xa, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000400), &(0x7f0000000340)={&(0x7f0000000300)={[0x8003]}, 0x8}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f00000000c0)="d2bb92b550d6f8f1b27f0478c07665496ded4d64", 0x14, 0xfa0000000, 0x0, 0x2}]) 00:13:54 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:13:56 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:13:59 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:14:00 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:14:01 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:14:03 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:14:04 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0xfffffffffffffffe, 0x0, 0x0, &(0x7f0000013800)) mount$tmpfs(0x0, &(0x7f0000004240)='./file0\x00', &(0x7f0000004280), 0x0, 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', 0x0, 0x0) 00:14:06 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:14:11 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 00:14:11 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:14:13 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 00:14:13 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:14:15 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x78) 00:14:16 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 00:14:19 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:20 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, 0x0) 00:14:22 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:23 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:25 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:26 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:28 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:30 executing program 0: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:32 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:34 executing program 0: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 00:14:36 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:38 executing program 0: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 00:14:41 executing program 1: r0 = syz_io_uring_setup(0x2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd=r0, 0x0, {}, 0x0, 0x0, 0x0, {0x0, r3, r0}}, 0x0) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:42 executing program 0: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 00:14:46 executing program 0: r0 = epoll_create1(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 00:14:48 executing program 1: r0 = syz_io_uring_setup(0x76a5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:51 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x9, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x0, 0x0, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000000f80)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:52 executing program 1: r0 = syz_io_uring_setup(0x76a5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:53 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x9, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x0, 0x0, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000000f80)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:55 executing program 1: r0 = syz_io_uring_setup(0x76a5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:56 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x9, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x0, 0x0, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000000f80)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:14:58 executing program 1: r0 = syz_io_uring_setup(0x76a5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x989680}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 00:14:58 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x9, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@alu={0x7, 0x1, 0x0, 0x0, 0xa}]}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000000f80)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 00:15:03 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x9, r0, r1, 0x0, 0x0) 00:15:03 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_rr_get_interval(0xffffffffffffffff, 0x0) 00:15:05 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x9, r0, r1, 0x0, 0x0) 00:15:06 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_rr_get_interval(0xffffffffffffffff, 0x0) 00:15:08 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x9, r0, r1, 0x0, 0x0) 00:15:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_rr_get_interval(0xffffffffffffffff, 0x0) 00:15:11 executing program 0: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x9, r0, r1, 0x0, 0x0) 00:15:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sched_rr_get_interval(0xffffffffffffffff, 0x0) 00:15:14 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:14 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:17 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:18 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:20 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:20 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:23 executing program 1: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:23 executing program 0: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:26 executing program 0: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:27 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:28 executing program 0: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:29 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:30 executing program 0: r0 = memfd_create(&(0x7f0000000200)='\x00\x03\x00\x00\x00\x02\x00\x93\x9d\x85\b\x82|\xe5aG~\xd8\x11%n\xc0:\xc1\x9dH\xfa\xcaf\'>\xa4\x00\x97s\xcb\xabg\x03\xa3C\x96+\xa7|u\xe8\a}<\xb1&li\xfd\xa5yP\x90\xf46\x80J\x8a\x99', 0x4) ftruncate(r0, 0x1000000) lseek(r0, 0x0, 0x4) 00:15:33 executing program 1: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/clear_refs\x00', 0x1, 0x0) writev(r0, &(0x7f0000001b00)=[{&(0x7f0000001580)="df", 0x1}], 0x1) 00:15:36 executing program 0: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x9}) setgroups(0x569, &(0x7f0000000000)=[0x0, 0x0, 0x0]) 00:15:41 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:43 executing program 0: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x9}) setgroups(0x569, &(0x7f0000000000)=[0x0, 0x0, 0x0]) 00:15:44 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:48 executing program 0: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x9}) setgroups(0x569, &(0x7f0000000000)=[0x0, 0x0, 0x0]) 00:15:49 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:52 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 00:15:53 executing program 0: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x0, 0x9}) setgroups(0x569, &(0x7f0000000000)=[0x0, 0x0, 0x0]) 00:15:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) 00:15:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}]}, 0x34}}, 0x0) 00:15:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) 00:16:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}]}, 0x34}}, 0x0) 00:16:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) 00:16:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}]}, 0x34}}, 0x0) 00:16:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x7, 0x5}, 0x14}}, 0x0) 00:16:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}]}, 0x34}}, 0x0) 00:16:09 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) [ 972.143516][ T26] audit: type=1800 audit(971.060:2): pid=3024 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 [ 972.262115][ T3024] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:12 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:13 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) [ 976.314576][ T26] audit: type=1800 audit(975.250:3): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 [ 976.431507][ T3028] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:15 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:16 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) 00:16:19 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 980.231941][ T26] audit: type=1800 audit(979.160:4): pid=3032 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=636 res=0 errno=0 [ 980.473151][ T3032] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:20 executing program 1: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) 00:16:21 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 983.926677][ T26] audit: type=1800 audit(982.860:5): pid=3037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="vda" ino=644 res=0 errno=0 [ 984.158301][ T3037] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:24 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:27 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:28 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:29 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:31 executing program 0: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:32 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0xd3, 0xe0902) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) 00:16:35 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) [ 998.218107][ T26] audit: type=1800 audit(997.130:6): pid=3052 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=638 res=0 errno=0 [ 998.291320][ T3052] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:16:39 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) 00:16:40 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 1001.988715][ T26] audit: type=1800 audit(1000.920:7): pid=3056 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=639 res=0 errno=0 [ 1002.081899][ T3056] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:42 executing program 0: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000000)) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10e042, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000140)={0x8, 0x0, 0x0, 0x0, 0x9689}) 00:16:43 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) [ 1005.332311][ T26] audit: type=1800 audit(1004.270:8): pid=3060 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="vda" ino=640 res=0 errno=0 [ 1005.419065][ T3060] EXT4-fs warning (device vda): verify_group_input:165: Cannot read last block (300680) 00:16:46 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 00:16:47 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-'}, 0xffffffffffffff11, 0x0) 00:16:50 executing program 1: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000022c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002240)={r2}, 0x8) 00:16:50 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-'}, 0xffffffffffffff11, 0x0) 00:16:53 executing program 1: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000022c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002240)={r2}, 0x8) 00:16:53 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-'}, 0xffffffffffffff11, 0x0) 00:16:56 executing program 1: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000022c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002240)={r2}, 0x8) 00:16:56 executing program 0: r0 = socket$rds(0x15, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040), &(0x7f0000000080)={'U-'}, 0xffffffffffffff11, 0x0) 00:17:00 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:00 executing program 1: setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)=0x80000001, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000022c0)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000002240)={r2}, 0x8) 00:17:04 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:08 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:12 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000900)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}}) 00:17:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:17:18 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_set$pid(0x2, r1, 0x0) [ 1039.992580][ T3096] input: syz1 as /devices/virtual/input/input0 00:17:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:17:21 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_set$pid(0x2, r1, 0x0) [ 1043.660637][ T3104] input: syz1 as /devices/virtual/input/input1 00:17:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:17:25 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_set$pid(0x2, r1, 0x0) [ 1047.044540][ T3112] input: syz1 as /devices/virtual/input/input2 00:17:27 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:17:28 executing program 1: r0 = memfd_secret(0x0) ioctl$NS_GET_PARENT(r0, 0x5460, 0xec000) r1 = getpid() ioprio_set$pid(0x2, r1, 0x0) [ 1049.887574][ T3120] input: syz1 as /devices/virtual/input/input3 00:17:32 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) 00:17:35 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1056.704710][ T3128] input: syz1 as /devices/virtual/input/input4 00:17:38 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1059.889193][ T3134] input: syz1 as /devices/virtual/input/input5 00:17:41 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1063.269326][ T3140] input: syz1 as /devices/virtual/input/input6 00:17:44 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1065.821741][ T3146] input: syz1 as /devices/virtual/input/input7 00:17:45 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x34}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 1067.748931][ T3152] input: syz1 as /devices/virtual/input/input8 [ 1068.968445][ T3158] input: syz1 as /devices/virtual/input/input9 00:17:48 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 00:17:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) [ 1073.479925][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1073.988601][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 1074.229019][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1074.458587][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1074.460395][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.461819][ T12] usb 1-1: Product: syz [ 1074.462853][ T12] usb 1-1: Manufacturer: syz [ 1074.463894][ T12] usb 1-1: SerialNumber: syz [ 1074.970920][ T12] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1075.374767][ T12] usb 1-1: USB disconnect, device number 2 00:17:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) 00:17:57 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 00:17:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) [ 1080.549201][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1080.848985][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 1081.092242][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1081.331194][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1081.333231][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.334814][ T12] usb 1-1: Product: syz [ 1081.351941][ T12] usb 1-1: Manufacturer: syz [ 1081.353414][ T12] usb 1-1: SerialNumber: syz [ 1081.734683][ T12] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1082.627571][ T2102] usb 1-1: USB disconnect, device number 3 00:18:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) 00:18:05 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 00:18:06 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) [ 1088.628221][ T2678] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1088.967509][ T2678] usb 1-1: Using ep0 maxpacket: 32 [ 1089.229520][ T2678] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1089.537670][ T2678] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1089.539557][ T2678] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.541494][ T2678] usb 1-1: Product: syz [ 1089.542610][ T2678] usb 1-1: Manufacturer: syz [ 1089.543931][ T2678] usb 1-1: SerialNumber: syz [ 1089.628893][ T2724] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1089.888097][ T2724] usb 2-1: Using ep0 maxpacket: 32 [ 1089.979120][ T2678] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1090.193650][ T2724] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1090.429161][ T2724] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1090.430923][ T2724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.432335][ T2724] usb 2-1: Product: syz [ 1090.433711][ T2724] usb 2-1: Manufacturer: syz [ 1090.434784][ T2724] usb 2-1: SerialNumber: syz [ 1090.723944][ T2724] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1091.181537][ T2102] usb 1-1: USB disconnect, device number 4 [ 1091.833552][ T12] usb 2-1: USB disconnect, device number 2 00:18:12 executing program 0: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 00:18:13 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) [ 1096.228741][ T2724] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1096.498498][ T2724] usb 1-1: Using ep0 maxpacket: 32 [ 1096.538153][ T829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1096.779073][ T2724] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1096.799085][ T829] usb 2-1: Using ep0 maxpacket: 32 [ 1097.034494][ T2724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.048538][ T2724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.050023][ T2724] usb 1-1: Product: syz [ 1097.051039][ T2724] usb 1-1: Manufacturer: syz [ 1097.052096][ T2724] usb 1-1: SerialNumber: syz [ 1097.110562][ T829] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1097.408778][ T2724] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 1097.431001][ T829] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1097.432849][ T829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.434350][ T829] usb 2-1: Product: syz [ 1097.458036][ T829] usb 2-1: Manufacturer: syz [ 1097.459503][ T829] usb 2-1: SerialNumber: syz [ 1097.954268][ T829] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1098.582608][ T2028] usb 1-1: USB disconnect, device number 5 [ 1098.947219][ T2678] usb 2-1: USB disconnect, device number 3 00:18:21 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0xc, &(0x7f0000000100)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2}]}}) 00:18:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) [ 1105.458492][ T829] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1105.778015][ T829] usb 2-1: Using ep0 maxpacket: 32 [ 1105.979971][ T829] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1106.340100][ T829] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1106.342077][ T829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.343638][ T829] usb 2-1: Product: syz [ 1106.344792][ T829] usb 2-1: Manufacturer: syz [ 1106.368072][ T829] usb 2-1: SerialNumber: syz [ 1106.862146][ T829] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1107.521416][ T829] usb 2-1: USB disconnect, device number 4 00:18:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) 00:18:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001100f3a9000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000ae860000000010001a8004001c0808"], 0x30}}, 0x0) 00:18:32 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 00:18:34 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:35 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 00:18:37 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 00:18:39 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:40 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000001840)={'ip6_vti0\x00', &(0x7f00000017c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) 00:18:44 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:45 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:49 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:50 executing program 0: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:57 executing program 1: r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0xc0}) r1 = dup(r0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000005940)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) syz_io_uring_setup(0x55b4, &(0x7f00000000c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, 0x0) 00:18:58 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:03 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:08 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000005800)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000900)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\n'], 0x28}}], 0x2, 0x0) 00:19:14 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000032a000/0x3000)=nil], &(0x7f0000000080), 0x0, 0x0) 00:19:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:17 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000032a000/0x3000)=nil], &(0x7f0000000080), 0x0, 0x0) 00:19:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:22 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000032a000/0x3000)=nil], &(0x7f0000000080), 0x0, 0x0) 00:19:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:26 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000d, 0x32, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000032a000/0x3000)=nil], &(0x7f0000000080), 0x0, 0x0) 00:19:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}]}, 0x1c}}, 0x0) 00:19:45 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) [ 1190.855541][ C1] hrtimer: interrupt took 1827600 ns 00:19:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:57 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:19:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:20:01 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000140), 0xc) 00:20:03 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000006980)) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r1, 0x902fbf3338f6e7c7}, 0x14}}, 0x0) 00:20:04 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000140), 0xc) 00:20:07 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000140), 0xc) 00:20:09 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)) 00:20:10 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x10, &(0x7f0000000140), 0xc) 00:20:11 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)) 00:20:13 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo_reply={0x60}}}}}, 0x0) 00:20:14 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)) 00:20:16 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo_reply={0x60}}}}}, 0x0) 00:20:17 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000000)) 00:20:19 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo_reply={0x60}}}}}, 0x0) 00:20:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x35, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xfd) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x45, 0x0, "5e3dedcc186383f65f29b6f4814cb873705ba6b9bbc6d92ce3c0b74b427ee43cecc090608bc241fa9939139ee41ec5553f6a0cd88b112076ce82d41bcf329d3f2f7d074f0674a2b785d5b353c1d90bb7"}, 0xd8) 00:20:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x35, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xfd) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x45, 0x0, "5e3dedcc186383f65f29b6f4814cb873705ba6b9bbc6d92ce3c0b74b427ee43cecc090608bc241fa9939139ee41ec5553f6a0cd88b112076ce82d41bcf329d3f2f7d074f0674a2b785d5b353c1d90bb7"}, 0xd8) 00:20:23 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @echo_reply={0x60}}}}}, 0x0) 00:20:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x35, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xfd) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x45, 0x0, "5e3dedcc186383f65f29b6f4814cb873705ba6b9bbc6d92ce3c0b74b427ee43cecc090608bc241fa9939139ee41ec5553f6a0cd88b112076ce82d41bcf329d3f2f7d074f0674a2b785d5b353c1d90bb7"}, 0xd8) 00:20:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 00:20:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x35, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xfd) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "5254133cefa895a49c0b353ae8e9550956ef282c2fdab1f21a22f7def3e47e2b075a18438132fad29365aca08b227c118a72215eae7685a3a10c585a7ba4e6c74cb178ab123e44cfd1e5dd9e59e6dd9c"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x45, 0x0, "5e3dedcc186383f65f29b6f4814cb873705ba6b9bbc6d92ce3c0b74b427ee43cecc090608bc241fa9939139ee41ec5553f6a0cd88b112076ce82d41bcf329d3f2f7d074f0674a2b785d5b353c1d90bb7"}, 0xd8) 00:20:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) 00:20:32 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000001000090008"], 0x30}}, 0x0) 00:20:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 1235.601347][ T3388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000001000090008"], 0x30}}, 0x0) 00:20:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@deltaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) [ 1237.443392][ T3391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000001000090008"], 0x30}}, 0x0) [ 1241.380160][ T3396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:40 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 00:20:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001800010000000000000000000200000000000005000000001000090008"], 0x30}}, 0x0) [ 1243.972611][ T3401] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 00:20:45 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 00:20:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:20:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:20:51 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 00:20:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:20:57 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RATTACH(r0, &(0x7f0000000040)={0x14}, 0x14) ppoll(&(0x7f0000000680)=[{r0}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@unlock_all, 0xb) 00:21:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:21:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:21:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:21:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:13 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 00:21:13 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:20 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:21 executing program 1: fanotify_init(0x2f, 0x0) 00:21:22 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:23 executing program 1: fanotify_init(0x2f, 0x0) 00:21:26 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:21:27 executing program 1: fanotify_init(0x2f, 0x0) 00:21:30 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "00ea2f", 0xc, 0x11, 0x0, @private0, @local, {[], {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:21:30 executing program 1: fanotify_init(0x2f, 0x0) 00:21:32 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "00ea2f", 0xc, 0x11, 0x0, @private0, @local, {[], {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) 00:21:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000006100)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000005fc0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x1}}]}, 0x3c}}, 0x0) [ 1299.471286][ T3459] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:21:38 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "00ea2f", 0xc, 0x11, 0x0, @private0, @local, {[], {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 1305.671571][ T3459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:21:45 executing program 0: syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "00ea2f", 0xc, 0x11, 0x0, @private0, @local, {[], {0x0, 0x4e21, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 1311.300831][ T3459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.532255][ T3459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:21:53 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/proc/keys\x00', 0xfffffffffffffffe) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) [ 1315.376716][ T3459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.360620][ T3459] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.643281][ T3459] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.904505][ T3459] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.167838][ T3459] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 00:21:58 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/proc/keys\x00', 0xfffffffffffffffe) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) 00:21:58 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000006100)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000005fc0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x1}}]}, 0x3c}}, 0x0) [ 1321.710800][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 00:22:00 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/proc/keys\x00', 0xfffffffffffffffe) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) [ 1322.040785][ T3489] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.063717][ T3489] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.118757][ T3489] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 00:22:04 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='/proc/keys\x00', 0xfffffffffffffffe) sendfile(r1, r0, &(0x7f0000000000)=0x8001, 0x3fe0000000000) [ 1326.690745][ T3489] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.355134][ C0] ================================================================== [ 1330.360149][ C0] BUG: KASAN: use-after-free in walk_stackframe+0x11c/0x260 [ 1330.361889][ C0] Read of size 8 at addr ffffaf800ee0bf40 by task syz-executor.1/3489 [ 1330.363531][ C0] [ 1330.366258][ C0] CPU: 0 PID: 3489 Comm: syz-executor.1 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1330.369095][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1330.370351][ C0] Call Trace: [ 1330.371423][ C0] [] dump_backtrace+0x2e/0x3c [ 1330.372948][ C0] [] show_stack+0x34/0x40 [ 1330.374289][ C0] [] dump_stack_lvl+0xe4/0x150 [ 1330.376283][ C0] [] print_address_description.constprop.0+0x2a/0x330 [ 1330.378149][ C0] [] kasan_report+0x184/0x1e0 [ 1330.379612][ C0] [] __asan_load8+0x6e/0x96 [ 1330.381050][ C0] [] walk_stackframe+0x11c/0x260 [ 1330.382489][ C0] [] arch_stack_walk+0x2c/0x3c [ 1330.384212][ C0] [] stack_trace_save+0xa6/0xd8 [ 1330.386501][ C0] [ 1330.387579][ C0] The buggy address belongs to the page: [ 1330.389215][ C0] page:ffffaf807aa78318 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8f00b [ 1330.390996][ C0] flags: 0x8800000000(section=17|node=0|zone=0) [ 1330.393689][ C0] raw: 0000008800000000 0000000000000000 ffffaf807aa78320 0000000000000000 [ 1330.395302][ C0] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1330.397503][ C0] raw: 00000000000007ff [ 1330.398596][ C0] page dumped because: kasan: bad access detected [ 1330.399905][ C0] page_owner tracks the page as freed [ 1330.400956][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), pid 2039, ts 1307978260500, free_ts 1312082469700 [ 1330.403482][ C0] __set_page_owner+0x48/0x136 [ 1330.404988][ C0] post_alloc_hook+0xd0/0x10a [ 1330.406534][ C0] get_page_from_freelist+0x8da/0x12d8 [ 1330.407834][ C0] __alloc_pages+0x150/0x3b6 [ 1330.409042][ C0] copy_process+0x482/0x3c34 [ 1330.410281][ C0] kernel_clone+0xee/0x920 [ 1330.411451][ C0] __do_sys_clone+0xf2/0x12e [ 1330.412729][ C0] sys_clone+0x32/0x44 [ 1330.413913][ C0] ret_from_syscall+0x0/0x2 [ 1330.415259][ C0] page last free stack trace: [ 1330.416537][ C0] __reset_page_owner+0x4a/0xea [ 1330.417874][ C0] free_pcp_prepare+0x29c/0x45e [ 1330.419066][ C0] free_unref_page+0x6a/0x31e [ 1330.420284][ C0] __free_pages+0xe2/0x112 [ 1330.421473][ C0] put_task_stack+0x1d0/0x2b0 [ 1330.422681][ C0] finish_task_switch.isra.0+0x3ce/0x420 [ 1330.424037][ C0] __schedule+0x58e/0x118e [ 1330.425626][ C0] preempt_schedule_irq+0x4a/0x13e [ 1330.427387][ C0] resume_kernel+0x16/0x18 [ 1330.428735][ C0] [ 1330.429506][ C0] Memory state around the buggy address: [ 1330.430951][ C0] ffffaf800ee0be00: 00 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 [ 1330.432326][ C0] ffffaf800ee0be80: 00 00 00 00 00 00 00 00 ff ff ff ff 00 00 00 00 [ 1330.433641][ C0] >ffffaf800ee0bf00: 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff [ 1330.434900][ C0] ^ [ 1330.436720][ C0] ffffaf800ee0bf80: ff ff ff ff f1 f1 f1 f1 00 00 00 f3 f3 f3 f3 f3 [ 1330.438201][ C0] ffffaf800ee0c000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1330.439519][ C0] ================================================================== [ 1330.440852][ C0] Disabling lock debugging due to kernel taint [ 1330.447135][ T3489] Kernel panic - not syncing: corrupted stack end detected inside scheduler [ 1330.448653][ T3489] CPU: 0 PID: 3489 Comm: syz-executor.1 Tainted: G B 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 [ 1330.450095][ T3489] Hardware name: riscv-virtio,qemu (DT) [ 1330.450824][ T3489] Call Trace: [ 1330.451429][ T3489] [] dump_backtrace+0x2e/0x3c [ 1330.452568][ T3489] [] show_stack+0x34/0x40 [ 1330.453572][ T3489] [] dump_stack_lvl+0xe4/0x150 [ 1330.454754][ T3489] [] dump_stack+0x1c/0x24 [ 1330.456324][ T3489] [] panic+0x24a/0x634 [ 1330.457488][ T3489] [] schedule+0x0/0x14c [ 1330.458691][ T3489] [] preempt_schedule_irq+0x4a/0x13e [ 1330.460043][ T3489] [] resume_kernel+0x16/0x18 [ 1330.461475][ T3489] SMP: stopping secondary CPUs [ 1330.463755][ T3489] Rebooting in 86400 seconds.. VM DIAGNOSIS: 04:48:56 Registers: info registers vcpu 0 pc ffffffff8011dab0 mhartid 0000000000000000 mstatus 00000000000000a0 mip 00000000000000a0 mie 000000000000022a mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80ad53e0 sepc ffffffff82e8a0f8 mcause 8000000000000007 scause 8000000000000005 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff8011dab0 x2/sp ffffaf800ee0bda0 x3/gp ffffffff85863ac0 x4/tp ffffaf800c22b080 x5/t0 ffffffff86bcb657 x6/t1 fffff5ef0b53910c x7/t2 0000000000000000 x8/s0 ffffaf800ee0bde0 x9/s1 0000000000000000 x10/a0 0000000000000000 x11/a1 00000000000f0000 x12/a2 0000000000000505 x13/a3 ffffffff831a24bc x14/a4 ffffaf800c22b080 x15/a5 0000000000000000 x16/a6 0000000000f00000 x17/a7 ffffaf805a9c8863 x18/s2 ffffffff8453a6b0 x19/s3 ffffffff8000a052 x20/s4 0000000000000000 x21/s5 ffffffff85863560 x22/s6 0000000000003fff x23/s7 ffffaf800ee0bee0 x24/s8 0000000000400000 x25/s9 ffffffffffffc000 x26/s10 ffffaf800ee0bfc0 x27/s11 0000000000000008 x28/t3 fffffffff3f3f300 x29/t4 fffff5ef0b53910c x30/t5 fffff5ef0b53910d x31/t6 ffffaf800ee0b958 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000 info registers vcpu 1 pc 0000000080000544 mhartid 0000000000000001 mstatus 0000000000000820 mip 0000000000000080 mie 00000000000002aa mideleg 0000000000000222 medeleg 000000000000b109 mtvec 0000000080000540 stvec ffffffff800055d4 mepc ffffffff80115a88 sepc 000000000003cb3c mcause 8000000000000007 scause 0000000000000008 mtval 0000000000000000 stval 0000000000000000 x0/zero 0000000000000000 x1/ra ffffffff80115a88 x2/sp ffffaf800f087310 x3/gp ffffffff85863ac0 x4/tp 0000000080017000 x5/t0 fffff5ef01fcac18 x6/t1 e92b825dd5f6ce00 x7/t2 0000000000000000 x8/s0 ffffaf800f087430 x9/s1 ffffffff8343c840 x10/a0 ffffaf8009d6ba98 x11/a1 0000000000000003 x12/a2 1ffff5f0013ad753 x13/a3 ffffffff80115a88 x14/a4 0000000000000000 x15/a5 ffffaf8009d6ba98 x16/a6 0000000000f00000 x17/a7 ffffffff8040f576 x18/s2 ffffaf800f0873c0 x19/s3 ffffaf8009d6b080 x20/s4 ffffaf8009d6ba98 x21/s5 ffffaf8009d6b080 x22/s6 ffffffff86c1a620 x23/s7 ffffaf8009d6c080 x24/s8 ffffffff85889780 x25/s9 1ffff5f001e10e68 x26/s10 ffffffff84c27ae0 x27/s11 ffffffff8046ff84 x28/t3 fffffffff3f3f300 x29/t4 ffffffff80112282 x30/t5 1ffff5f001e10e34 x31/t6 0000000000040000 f0/ft0 0000000000000000 f1/ft1 0000000000000000 f2/ft2 0000000000000000 f3/ft3 0000000000000000 f4/ft4 0000000000000000 f5/ft5 0000000000000000 f6/ft6 0000000000000000 f7/ft7 0000000000000000 f8/fs0 0000000000000000 f9/fs1 0000000000000000 f10/fa0 0000000000000000 f11/fa1 0000000000000000 f12/fa2 0000000000000000 f13/fa3 0000000000000000 f14/fa4 0000000000000000 f15/fa5 0000000000000000 f16/fa6 0000000000000000 f17/fa7 0000000000000000 f18/fs2 0000000000000000 f19/fs3 0000000000000000 f20/fs4 0000000000000000 f21/fs5 0000000000000000 f22/fs6 0000000000000000 f23/fs7 0000000000000000 f24/fs8 0000000000000000 f25/fs9 0000000000000000 f26/fs10 0000000000000000 f27/fs11 0000000000000000 f28/ft8 0000000000000000 f29/ft9 0000000000000000 f30/ft10 0000000000000000 f31/ft11 0000000000000000