tl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:45 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x401054d6, &(0x7f0000000000)) 10:25:45 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x1c, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000fffff0", @ANYRES32=r2], 0x1ec}}, 0x0) [ 667.577547][ T1098] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 667.621270][ T1101] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:45 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x40186366, &(0x7f0000000000)) 10:25:45 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xfffffffe) 10:25:45 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x30, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:45 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:45 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x401c5820, &(0x7f0000000000)) 10:25:45 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x34, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:45 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x2000000000) 10:25:45 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x4020940d, &(0x7f0000000000)) 10:25:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:45 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:46 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x2000000000000) 10:25:46 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x4020ae46, &(0x7f0000000000)) 10:25:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x4090ae82, &(0x7f0000000000)) 10:25:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x7fffffffff7ff) 10:25:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:46 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:46 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x41015500, &(0x7f0000000000)) 10:25:46 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x8000000000000) 10:25:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:46 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454cf, &(0x7f0000000000)) 10:25:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x5, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:47 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x80000000000000) 10:25:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:47 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454d2, &(0x7f0000000000)) 10:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000088a8", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:47 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454d3, &(0x7f0000000000)) 10:25:47 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xf0ff1f00000000) 10:25:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000007fff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x8, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454d7, &(0x7f0000000000)) 10:25:48 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x100000000000000) 10:25:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0xf, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000009eff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454dd, &(0x7f0000000000)) 10:25:48 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x200000000000000) 10:25:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000f0ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:48 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454df, &(0x7f0000000000)) 10:25:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:48 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x400000000000000) 10:25:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:48 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454e0, &(0x7f0000000000)) 10:25:48 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2b, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:49 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x800454e1, &(0x7f0000000000)) 10:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x700000000000000) 10:25:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2c, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:49 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x80047013, &(0x7f0000000000)) 10:25:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xa00000000000000) 10:25:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x80085502, &(0x7f0000000000)) 10:25:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000058", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x1f00000000000000) 10:25:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 671.998319][ T1385] __nla_validate_parse: 62 callbacks suppressed [ 671.998341][ T1385] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:49 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x80086301, &(0x7f0000000000)) 10:25:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3a, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 672.066640][ T1389] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 672.124810][ T1390] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 672.162021][ T1395] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:49 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x2300000000000000) 10:25:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:50 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x80086601, &(0x7f0000000000)) 10:25:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x3c, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 672.379283][ T1407] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:50 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x3f00000000000000) [ 672.423412][ T1411] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 672.456791][ T1416] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010103, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 672.572971][ T1420] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:50 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x801054db, &(0x7f0000000000)) [ 672.687715][ T1425] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000ffffa8", @ANYRES32=r2], 0x1ec}}, 0x0) [ 672.742767][ T1432] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:50 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x8000000000000000) 10:25:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:50 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x801c581f, &(0x7f0000000000)) 10:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000ffffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010105, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:50 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xd200000000000000) 10:25:50 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x80885659, &(0x7f0000000000)) 10:25:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000001", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010106, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x81f8943c, &(0x7f0000000000)) 10:25:51 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xfeffffff00000000) 10:25:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000ffffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010107, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xfff7ffffffff0700) 10:25:51 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xc0045878, &(0x7f0000000000)) 10:25:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000088a8ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010108, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:51 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xffffffff00000000) 10:25:51 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xc0045878, &(0x7f0000000000)) 10:25:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x6401010a, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000f0ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:51 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x30) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 10:25:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xac141412, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:52 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:52 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xc0085504, &(0x7f0000000000)) 10:25:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000007fffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0xac14141c, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:52 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x28d23000) mmap(&(0x7f000011f000/0x4000)=nil, 0x4000, 0x1000000, 0x1d4bbd5cad2f85b2, r1, 0x71022000) 10:25:52 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xc0189436, &(0x7f0000000000)) 10:25:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000009effff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local={0xac, 0x13}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:52 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xc020660b, &(0x7f0000000000)) 10:25:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000f0ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local={0xac, 0x1c}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:52 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xc0000, 0x0) syz_io_uring_setup(0x9e4, &(0x7f0000000080)={0x0, 0x9e02, 0x10, 0x3, 0x371, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000d03000/0xa000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x178, 0x3a, 0x100, 0x70bd28, 0x25dfdbfb, {0x10}, [@typed={0x5, 0x61, 0x0, 0x0, @str='\x00'}, @generic="4fa985eafca02c25faf8a5469593f31e7f55b061dbdccb0bd1704c791d28ea5972996da07046d100c41fc63de18858506b78230800d9752a391b0db33034398673bd9877f51baf7e011d77fba3850efc91e851a4c079f9b030e268880fbf87588445d661e14bfde8d77381d0127706961ef2754f9ed4cd4391f7e3b77f0603f54e132628192d3377a8e627eb41930f9560e59f", @generic="a89a087cfc607b42afa98ed1fb2d26829a4f7b157621e6559308bdeaccfe615d8d58aa43d49d91f87797861f4438fd622dd60c362c67aea8e01c1b0c9a99f027a24977b07267fe5abbff15c6ea14ff908e1722dce6e8c6b00349ce03a8e7d8aebc4f706f78483a14b37aebaebf2b8940e5c2dea46805c23db9514d1eb7609b1d8066e8e7a3cf8034f1aa730f11e0e2cab8472de3d77b2dcbc81fca12626b8d0767af5a8054d175e05b3d821a0e4ed34dc77f484759d8d499", @nested={0x10, 0xc, 0x0, 0x1, [@typed={0x4, 0x6a}, @typed={0x8, 0x69, 0x0, 0x0, @u32=0x5a}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x3, 0x0, r1, &(0x7f00000001c0)={0x4000200b}, r4}, 0x3) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x400, 0x101000) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000500)={0x0, 0x0}) r9 = gettid() fcntl$getownex(r5, 0x10, &(0x7f0000000780)={0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f0000000880)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@RTM_NEWNSID={0x5c, 0x58, 0x2, 0x70bd2c, 0x8, {}, [@NETNSA_FD={0x8, 0x3, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, r8}, @NETNSA_PID={0x8, 0x2, r9}, @NETNSA_PID={0x8, 0x2, r10}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8}, @NETNSA_NSID={0x8, 0x1, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000110) mmap(&(0x7f0000eb2000/0x3000)=nil, 0x3000, 0x200000a, 0x10, r5, 0x9ad46000) 10:25:52 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xc020f509, &(0x7f0000000000)) 10:25:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local={0xac, 0x30}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000ffffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0xd000943e, &(0x7f0000000000)) 10:25:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local={0xac, 0x14, 0x13}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:25:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x2010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:25:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local={0xac, 0x14, 0x1c}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:53 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x2) 10:25:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local={0xac, 0x14, 0x30}}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:53 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408583, 0x26) syz_io_uring_setup(0x1ec1, &(0x7f0000000080)={0x0, 0xc3c8, 0x4, 0x1, 0xe5}, &(0x7f0000edd000/0x4000)=nil, &(0x7f00005e4000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:25:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:53 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x3) 10:25:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:54 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x4) 10:25:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000040)={0x1, 0xffff, [{0x2, 0x0, 0x10001}]}) mmap$IORING_OFF_CQ_RING(&(0x7f0000480000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:25:54 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:54 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x5) 10:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002340)={0x0, 0x0}, &(0x7f0000002380)=0xc) read$FUSE(r0, &(0x7f0000002440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(0xffffffffffffffff, r3, 0x0) r4 = getegid() setresgid(r4, 0x0, 0x0) getgroups(0x8, &(0x7f0000000380)=[r4, 0x0, r4, r4, r4, r4, 0xee01, r4]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x3, 0x492, [0x20000500, 0x0, 0x0, 0x200006a6, 0x2000099a], 0x0, &(0x7f0000000340), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x14, 0x88f5, 'veth0_virt_wifi\x00', 'geneve0\x00', 'ip_vti0\x00', 'veth1_macvtap\x00', @link_local, [0x0, 0xff, 0xff, 0xff], @link_local, [], 0xb6, 0xee, 0x13e, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00, 0xff000000, 0x51, 0x33, 0x31, 0x20, 0x4e22, 0x4e20, 0x4e23, 0x4e24}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x6, {0x8}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x5, 0x31, 0x88e5, 'tunl0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'veth1_to_batadv\x00', @random="3d760a7edc03", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff], 0xae, 0x11e, 0x156, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0xffffffffffffffff, r5, r4, 0x0, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}, {0x5, 0x0, 0x890d, 'ip_vti0\x00', 'syz_tun\x00', 'batadv0\x00', 'macvlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xe6, 0x11e, 0x16e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x4, 0x6005, 0x0, 0x6}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xffffffff, 0xff, 0xfa, 0x1, 0x7, 0x20, 0x4e21, 0x4e23, 0x4e23, 0x4e24}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffffc, 'syz0\x00', {0x2}}}}}]}, {0x0, '\x00', 0x3}]}, 0x50a) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000004800)={&(0x7f0000002040)={0x50, 0x0, 0x3, {0x7, 0x22, 0x3, 0x2010001, 0x81, 0x1000, 0x3, 0x3}}, &(0x7f00000020c0)={0x18, 0xffffffffffffffda, 0x8, {0x4}}, &(0x7f0000002100)={0x18, 0xfffffffffffffff5, 0x9, {0x40}}, &(0x7f0000002140)={0x18, 0x0, 0x80, {0x10000}}, &(0x7f0000002180)={0x18, 0x0, 0x4, {0x80000000}}, &(0x7f00000021c0)={0x28, 0xffffffffffffffda, 0x100, {{0x80000000, 0x3, 0x1}}}, &(0x7f0000002200)={0x60, 0x0, 0x7fffffff, {{0x7fffffff, 0xffffffffffff5b6e, 0x6, 0x0, 0x2eab, 0x5, 0x4, 0xfff}}}, &(0x7f0000002280)={0x18, 0xffffffffffffffda, 0x4000, {0x2}}, &(0x7f00000022c0)={0x13, 0x0, 0x8, {'{!\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x7, {0x0, 0x1d}}, &(0x7f00000023c0)={0x78, 0x0, 0x3ff, {0x6, 0x0, 0x0, {0x6, 0xffff, 0x9, 0x6, 0x12, 0xffffffffffff8001, 0x1f, 0x2, 0x7, 0x565c31bc34c66890, 0x6, r1, 0x0, 0x101}}}, &(0x7f0000004480)={0x90, 0x0, 0x3ff, {0x4, 0x3, 0x0, 0x3, 0x4, 0xb0, {0x4, 0x8, 0x6, 0x98bb, 0xc9b2, 0x7fff, 0x6, 0x6, 0x6, 0x4000, 0x7, 0xee00, r2, 0x6, 0x97}}}, &(0x7f0000004540)={0x30, 0x0, 0x1f3d, [{0x2, 0x1, 0x4, 0x7, '!*+{'}]}, &(0x7f0000004580)={0x148, 0x0, 0x80000000000000, [{{0x0, 0x2, 0x4, 0x4, 0x9, 0x6, {0x5, 0x6dc2, 0x100000000, 0x5045eaee, 0x7, 0xfffffffffffffffb, 0xe0de, 0x4, 0xda, 0x6000, 0x6, r3, r4, 0x6, 0x20}}, {0x5, 0x5, 0x0, 0x8}}, {{0x3, 0x2, 0x800, 0x4, 0x5, 0x8000, {0x3, 0x2, 0x0, 0x0, 0xae8, 0x100, 0x20, 0x5, 0x0, 0x2000, 0x470, 0x0, 0xffffffffffffffff, 0x1000, 0x2}}, {0x3, 0x7f, 0x8, 0x5, '$>\'!#^*\x00'}}]}, &(0x7f0000004700)={0xa0, 0x0, 0xfff, {{0x1, 0x0, 0x8000, 0xfde6, 0x9, 0x8, {0x1, 0x4, 0x7, 0x20, 0x4, 0x7, 0x2, 0x9, 0x0, 0x6000, 0xfa, 0xffffffffffffffff, 0xee01, 0x6, 0x4}}, {0x0, 0x9}}}, &(0x7f00000047c0)={0x20, 0x0, 0x4, {0x8, 0x0, 0x3, 0x10000}}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:25:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:54 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:54 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x6) 10:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 677.033272][ T1717] __nla_validate_parse: 66 callbacks suppressed [ 677.033293][ T1717] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:54 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x101) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:25:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x2a, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 677.109664][ T1719] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 677.160147][ T1722] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:54 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x7) 10:25:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:54 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 677.224045][ T1728] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 677.348629][ T1733] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000040)=0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x4d2f9000) 10:25:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 677.437921][ T1739] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:55 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x8) 10:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000002", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 677.541423][ T1745] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:55 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 677.597861][ T1747] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:25:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 677.674002][ T1752] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:55 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r1, 0x8000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f00000000c0)={{r4}, 0x0, 0x18, @inherit={0x48, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, {0x12, 0x1, 0x5a0, 0x0, 0xffff}}}, @devid}) connect$vsock_stream(r1, &(0x7f00000010c0)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x103480, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r5, 0x0) [ 677.771032][ T1759] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000003", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:55 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x300) 10:25:55 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x3, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000004", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:55 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x500) 10:25:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x6, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:56 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x10100, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) syz_io_uring_setup(0x2b91, &(0x7f0000000040)={0x0, 0xb087, 0x1, 0x2, 0x183, 0x0, r1}, &(0x7f0000d62000/0x1000)=nil, &(0x7f0000a9a000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) 10:25:56 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x600) 10:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000006", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x7, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:56 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x700) 10:25:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000008", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x8, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:56 executing program 0: ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:25:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:56 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0xff00) 10:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000009", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0xb, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:56 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1000000) 10:25:56 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x16) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl(r0, 0xf0, &(0x7f00000000c0)="98d39cbd8d50a6700593143fe5b39b85e0001cc1d7f4f22b80f9c3b2c70000160600fec00000000000000000") 10:25:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000a", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x1c, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x2000000) 10:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x30, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000c", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:57 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r1, 0x401) getdents(r1, &(0x7f0000000040)=""/175, 0xaf) syz_io_uring_setup(0x74e6, &(0x7f0000000100)={0x0, 0x9843, 0x2, 0x0, 0x28}, &(0x7f0000d9c000/0x2000)=nil, &(0x7f0000bad000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r4, r3, &(0x7f0000000b00)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r5}}, 0x7) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}, 0x1d58b007) 10:25:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x3000000) 10:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x34, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000e", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x4000000) 10:25:57 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000611000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6, 0x12, r0, 0x38d40000) 10:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x60, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000f", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x5000000) 10:25:57 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x12, r0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x2142, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000080)={{0x0, 0x101, 0x9, 0x4a4, 0x8000, 0x600, 0xb5bb, 0x8, 0x7, 0x9, 0x10001, 0x9, 0x3, 0x7, 0x6}}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001080)={{r2, 0x2, 0x7f, 0x1000, 0x7, 0x92a, 0x4, 0x1, 0x1000, 0x7, 0x3, 0x2e, 0x8, 0x0, 0x40}, 0x20, [0x0, 0x0, 0x0, 0x0]}) 10:25:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x6, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000010", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x6000000) 10:25:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x8, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000060", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x110, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101180, 0x62) r2 = memfd_create(&(0x7f0000000200)='1\xe8}\x00', 0x5) r3 = perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x4, 0x1, 0x0, 0x5, 0x0, 0xde75, 0x2008, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x101, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x400, 0x3f, 0x7, 0x1, 0x4, 0x1, 0x20, 0x0, 0xbb8d, 0x0, 0x101}, r1, 0x5, r1, 0x2) close_range(r2, r3, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x10c, &(0x7f0000000040)=0x8, 0x0, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x1, 0x3, 0x4, 0x8, 0x2, {r4, r5/1000+60000}, {0x4, 0x2, 0x9, 0x8, 0x1, 0x6, "92cbfcfa"}, 0x8001, 0x3, @fd=r1, 0xc83, 0x0, r1}) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000180)={{r6}, 0x4, &(0x7f0000000140)=[0x7fff, 0xac, 0x4f, 0xffffffffffffffff], 0x0, 0x6, [0xfffffffffffffffc, 0x40, 0x5, 0xb9]}) 10:25:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:58 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x7000000) 10:25:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xfffff000) 10:25:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000096", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x8000000) 10:25:58 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:58 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x3, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:58 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x0, 0x1010, r0, 0x6bdaa000) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@orangefs_parent={0x28, 0x2, {{"a1662200f9562b181bf418450f180b13", 0x9}, {"cb1c23cb0c5da4923ab23fdc5f3cdd91", 0x283d}}}, &(0x7f00000000c0), 0x400) 10:25:58 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0xfdfdffff) 10:25:58 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x6, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:59 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:59 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x311481, 0x20) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x202280, 0x61) 10:25:59 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0xff000000) 10:25:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000f0ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x7, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) dup2(r0, r0) 10:25:59 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0xfffffdfd) 10:25:59 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:25:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000200", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x8, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0xb, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:25:59 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/196, 0xc4}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/235, 0xeb}, {&(0x7f0000000440)=""/112, 0x70}, {&(0x7f00000004c0)=""/49, 0x31}, {&(0x7f0000000340)=""/104, 0x68}], 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000600), &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xe5, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x12a1, r1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$FITHAW(r0, 0xc0045878) 10:25:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000300", @ANYRES32=r2], 0x1ec}}, 0x0) 10:25:59 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 682.137255][ T2035] __nla_validate_parse: 64 callbacks suppressed [ 682.137275][ T2035] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.191511][ T2040] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.219441][ T2043] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 682.251668][ T2046] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:00 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x1c, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000400", @ANYRES32=r2], 0x1ec}}, 0x0) [ 682.396082][ T2057] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 682.409989][ T2058] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:00 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2972, &(0x7f0000000280)={0x0, 0x4353, 0x20, 0x0, 0x147}, &(0x7f0000ed2000/0x4000)=nil, &(0x7f000037a000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)=0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r2}}, 0x7) syz_io_uring_setup(0x730b, &(0x7f0000000180)={0x0, 0xf17, 0x1, 0x3, 0x1dc}, &(0x7f0000a37000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000100)={0x1, 0x0, 0x1000, 0x65, &(0x7f0000000040)="f90d0b89b58a2451e357593d5953cd681ff46364d83294fcee1737eacc31604ae28b8675d0914976b0485de81e06de98271697295b23f0ebe8d9258f7606dd9c688dab22b70edaedf239d7832ae44925dcd4e99807af373b6916cf999c72e104b180d7389d", 0xe, 0x0, &(0x7f00000000c0)="0972efdeb09895ac667c8ea17038"}) 10:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:00 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x30, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 682.527175][ T2063] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 682.582698][ T2064] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 682.601226][ T2067] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000600", @ANYRES32=r2], 0x1ec}}, 0x0) [ 682.637504][ T2069] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:00 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x34, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:00 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000040)}, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:00 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000380)={0x7f, 0x0, 0xff, 0x0, 0x47, "35160162b529caad40bf67581d35d30d9a1748"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000680)={{r1}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000000c0)={r4, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000940)={{}, 0x0, 0x0, @inherit={0x78, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000060000000000000065000000000000000900000000000000200000000000000005000000000000000008000000000000070000000000000000000000010000007c00000000000000fd820000000000000600000000000000bbaf00000000000007002000000000000800000000000000"]}, @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000100)={r4, 0x6, 0x1, 0x1}) 10:26:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000700", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000065", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:00 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:00 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x60, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:00 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'lo\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:00 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x220000, 0x140) 10:26:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000800", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000900", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000700)={{r3}, "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"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000000040)=0x7, 0x0, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:01 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000058", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000a00", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:01 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f00005bf000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c1ccc253d77c6ecc3c43c6173188d61d0b4321a33e04344c4567fabb68a772c4977c60bd9f742987bca5e66d99a53344bd27d3300bedddeab53a77e400882c84c30212a2f2dcdcbce88debff329e1078d4aca273cd86c15cb411e2c513d3dd32c1aa0bbdbc617aaaf3e0cf77356eb39c99eeff42b3108a524625539326ada315c5dc2b7cb2db1eabeaf742b52b822174221756542be7e39ca72af436ad911d043fe6e838ffdea74779426950bc3c6e6e59325570d4eb8fa5c59962b7cfa21d275a2a70c84e8eb596049727da3d6919cec7d27795a98364a3b9b0713b7e2a7ceca0d656e3a914", 0xe6, 0x20000000, &(0x7f0000000180)={0xa, 0x4e21, 0x9a7, @empty, 0x9}, 0x1c) r1 = signalfd(r0, &(0x7f0000000040)={[0xffffffffffffffff]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xc}, {0x5, 0x7}, {0xfff1, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @TCA_INGRESS_BLOCK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c090) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)) connect$inet6(r2, &(0x7f0000000500)={0xa, 0x4e24, 0x1, @mcast2, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) bind(r4, &(0x7f0000000380)=@ethernet={0x6, @broadcast}, 0x80) r5 = syz_open_dev$audion(&(0x7f00000004c0), 0x3, 0x412000) perf_event_open(&(0x7f0000000440)={0x4, 0x80, 0xc2, 0x7f, 0x1, 0x1, 0x0, 0x6, 0x20308, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x2, @perf_bp={&(0x7f0000000400)}, 0x801, 0x6, 0x6d6, 0x1, 0x1ff, 0x6, 0x9, 0x0, 0xffffff80, 0x0, 0x96e7}, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0x8) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) getsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000002c0)=0x80, &(0x7f0000000300)=0x2) syz_io_uring_setup(0x20f8, &(0x7f00000001c0)={0x0, 0x1eb0, 0x10, 0x5c66, 0x381, 0x0, r1}, &(0x7f00003d6000/0x3000)=nil, &(0x7f00006d3000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) 10:26:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000c00", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:01 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:01 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000640)=0x0) creat(&(0x7f0000000140)='./file0\x00', 0x4) sendmsg$nl_netfilter(r2, &(0x7f0000003b80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000002700)={0x1460, 0x3, 0x2, 0x101, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x6}, [@typed={0x14, 0x39, 0x0, 0x0, @ipv6=@loopback}, @generic="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", @nested={0x5, 0x1e, 0x0, 0x1, [@generic="1c"]}, @nested={0x4, 0x63}, @nested={0x9f, 0x31, 0x0, 0x1, [@generic="92fd46b6be66d85a92396e4990ecf19eee6d7c64c01e40352a1b92e30c33ea0c3d0e79", @generic="0ddfde68d8ca42654882ff0169a5d3c4d76a38c10fdf1503b7a26cd9c1af52477f8d294899c2df16ac53f28dc3aef8768430f62539713186002b18f70bc82b059717de31a40e7107494ffebfc00ef9cafe0db842ec763581eeb04f0bc7334ca5ba29d9cd2cfcfb7342b5d2c4d6ad731e89f936ea360f6c81"]}, @nested={0x222, 0x55, 0x0, 0x1, [@generic="0075a6b0d79187c01f9405e50d0913b2a42cf38242149279e1347cd0322881fc874820705f0a6a969cdf3b60186c4343bf540a4e899d03e30d7d80f833c87640c9f6ca613688307588cab9893ba04e493b0a80d993289eac31802ae1727237742ff24bb5da6d9a62b28c08ec91c430855e3d198f", @generic="f504e642d97fa7e35967427eaa5db14c03f79dfe0d800eefff9ee5b1dd2d55d56af4c0a539afeaa3eafc0fa0f1418c4788a2633136f32053f3c2f0cc8f398763d16d30831572f33d82c3d43a94a6fc4073d745fa528dbde6567bcfe67d404a4c91fa5ecd548f829aa938dcb85fc1e327a7edf056426d98d5eb001dc5b26d702f87d84ec68caa4bde62a1136b561a43efa1cec8488e0e656436627bde85be9779be462a8232356eabc17af6ef6b8aa49aca2c3a119eb646de7795ec44b8627d", @generic="deb3ccc6edf4d1ed47f7c4757da3f67db7e9844e7a693b7581c181b8b06cb6e5c9a81297b6b85530077e422d81d5c99ab1c14c74c38262672193a82913b0ae1f6e54845eb5329fbf7b199a955eb94c103a44475c4988e69fef5220ac7969ad18fc237c26fab00b452491c958533526077b925db6c9e9e909743333ee884206ee7bbdc3706169e4dfb38fbbfdb6eb23efae65ae3104d649b5ade177a21f8120ece424d9bb668828bcc452e67ea9ef2056d2c805169f61b0adf07e2539839379ef6c7e808b065bb401ad70b740301e28fe5d7ebcb2", @generic="e8a23e844d250c1aa765df27bfb274", @typed={0x8, 0x33, 0x0, 0x0, @u32=0x3}]}, @typed={0x4, 0x70}, @nested={0x162, 0x4a, 0x0, 0x1, [@generic="d7e9b6fdfd60527f86ae77ef13cdc711748b0524ef6ab11c32991240718b4aebaeb61cab695d81238ac157bffab6fd1781f474f6c009aa8891f3b394aa4d8d5bce6df0a2f9f1f3cacaa2389841c6ca91327810d38951dc6a5189a8ddee", @typed={0xc, 0x83, 0x0, 0x0, @u64=0x12}, @generic="3e18dc54290da088eaf492f6674f87a1e7c722f942a645bdabf00a3288e555155e3d8c34583e29ef2378bdebf2a5e8aa66260e6ea17f3c5413e3e0fc0c78f0ba895dc04de1bfb1810c36dc20a371a0defa1da5ce3ca93ea3028c588273f0b0ef6780e42336e5818e99e35fa1b86de4a509f0a524290c269110a0d05699c6bd0fcb1dbcfbc868229df9c5d7c62ad28341ce43f7b08b0e87acc0041ae4ea813594609f74bdd5a0f26790e1950f9f82f06a5b51e68fa1f1308bfeb7b5cc1de424c76ce353708e1565f18927f10eb6383a526d56f6ee41f4710c937e2b4127955be573e639eb8e3f20dc8fbf7db416", @typed={0x8, 0x2c, 0x0, 0x0, @pid=r3}]}]}, 0x1460}, 0x1, 0x0, 0x0, 0x4000}, 0x200000d0) sendfile(r1, r2, 0x0, 0x5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00'}) r4 = syz_io_uring_complete(0x0) ioctl$KDFONTOP_SET_DEF(r4, 0x4b72, &(0x7f00000005c0)={0x2, 0x1, 0x2, 0x6, 0x7fffffff, &(0x7f00000001c0)="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"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r5 = socket$inet6(0xa, 0x6, 0x8) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000180)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r6, 0x401) ioctl$TUNSETLINK(r6, 0x400454cd, 0x2) 10:26:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000001", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x2010, r1, 0x10000000) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000080)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r1, 0x0, &(0x7f0000000040)="075559886c", 0x5, 0x40000020, 0x0, {0x0, r3}}, 0x9) 10:26:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000e00", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0xb921c000) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='nilfs2_segment_usage_freed\x00', r1}, 0x10) syz_io_uring_submit(r0, r3, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x101, 0x5, 0x1}, 0x400) 10:26:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000f00", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x322) 10:26:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000001000", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x62f3, &(0x7f0000000040)={0x0, 0xdc00, 0x2, 0x0, 0x390}, &(0x7f0000d7e000/0x2000)=nil, &(0x7f0000f5e000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:02 executing program 2: prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000006000", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(0xffffffffffffffff, r1, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000040)={0x80, 0xffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:02 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000f000", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 685.415369][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.421836][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 10:26:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:03 executing program 0: creat(&(0x7f0000000040)='./file0\x00', 0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='mounts\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/79, 0x4f}, {&(0x7f0000000240)=""/164, 0xa4}], 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002340)='ocfs2_dlmfs\x00', 0x0, &(0x7f00000001c0)='o\xcaA\x93.\xa2b\x04L2\x8e\x15\xe3\xb8e\x1f\xcd\xc94\x9c\x04\x90\x93#\xc3u4`\xe1\xb3\x8d0\x8b\xc2\x81\x82\xbe\xf19\xadw\x10\xcdW\x8f\xe1\x90W\x85#*M\xf3\xf9\x84l\xf1\xd7\x06b\xee\x15L\xdf\xf3DhY\x83\x97\x80\x95\xd4') read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) sendfile(r1, r2, 0x0, 0x5) getpeername(r1, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ad01", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:03 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:03 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x139900, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8758, 0x200800) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="03030080aaaa312834d514bbfffffff5ffffe000000238c97cfdb00956dd6bbc545f0f511c7ebcdadea44a4ddcf20700000000000000e027593bdc6176627c708dd19c94299d37673e2e7c4db152d5f0a2"], 0x26) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000003", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:03 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = syz_io_uring_setup(0xaca, &(0x7f0000000040)={0x0, 0x3491, 0x1, 0x0, 0x318}, &(0x7f0000a33000/0x2000)=nil, &(0x7f0000507000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000140)={0x8, {0x1, 0x12, 0x5, 0x7ff, 0x54a49c88}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:03 executing program 2: write(0xffffffffffffffff, &(0x7f0000000040)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0', [{0x20, '(v'}, {0x20, '.'}, {}, {0x20, '/dev/net/tun\x00'}, {0x20, 'syzkaller1\x00'}], 0xa, "7c0f083fbf6f0813e13961840a347982d8e8f34337796be88f2fb0a93b2c9d02aafbacfac13e2b45673ff471d28dcacfc9a2124391c8aeca81d92e1d"}, 0x67) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) 10:26:03 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000006", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) read(r2, &(0x7f0000000040)=""/163, 0xa3) 10:26:04 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000007", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, 0x0, 0x0) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:04 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) syz_io_uring_setup(0x7374, &(0x7f0000000240)={0x0, 0x409f5a, 0x21, 0x0, 0x398}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180)=0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'batadv_slave_0\x00'}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x100) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000040)={0x9, 0x1, 0x8, 0x100, 0x3}) close(r0) 10:26:04 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000009", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000a", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x3b8a, &(0x7f0000000040)={0x0, 0x7608, 0x4, 0x2, 0x333}, &(0x7f0000edb000/0x1000)=nil, &(0x7f0000804000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:04 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000c", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:04 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r2, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000140)=""/142, 0x8e}], 0x2, &(0x7f0000000240)=""/182, 0xb6}, 0x0, 0x42, 0x1, {0x2}}, 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) 10:26:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 687.269553][ T2444] __nla_validate_parse: 68 callbacks suppressed [ 687.269572][ T2444] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.364331][ T2450] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 687.390108][ T2459] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 687.420304][ T2463] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:05 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000040)}], 0x3}, 0x40033142) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee01) 10:26:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000e", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:05 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) [ 687.616620][ T2479] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.652979][ T2483] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:05 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 687.701657][ T2484] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 687.728831][ T2488] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000f", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:05 executing program 0: ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'veth1_to_hsr\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:05 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2b, 'rlimit'}]}, 0x8) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000140)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 687.960162][ T2498] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 688.007118][ T2502] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:05 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0x12, r0, 0x0) 10:26:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000006558", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:05 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r1, 0x401) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000100)={0x80000000}) 10:26:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000060", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:06 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x300, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000987000/0x4000)=nil, 0x4000}, 0x1}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4b, 0x7f, 0x4d, 0x5, 0x0, 0x19b5978, 0x8000, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040)}, 0x9000, 0x1000, 0x7c, 0xf, 0x7ed4, 0x9, 0x8000, 0x0, 0x8, 0x0, 0x80000001}, 0xffffffffffffffff, 0xd, r1, 0x1) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0000000120000003c60000f8ffffff1400660000002f9078ac1e0101ac1414e0df0c1d602c0e0891af5abcca066af8ba0615faaffaf228c5d98f5282e1"]}) sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipmr_newroute={0x70, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0x80, 0x10, 0x80, 0x7f, 0xfe, 0x2, 0xc8, 0x2, 0x200}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_MULTIPATH={0xc, 0x9, {0x101, 0x20, 0x3, r3}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_SRC={0x8, 0x2, @empty}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_FLAGS={0x6, 0x6, 0x10}}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_CLASS={0x6}}}}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_PREFSRC={0x8, 0x7, @loopback}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:06 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6gretap0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:06 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000005865", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:06 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000081", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:06 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x9b325f0c026c45b2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:07 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) timerfd_create(0x2, 0x80000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000140), 0x20, 0x40) memfd_create(&(0x7f0000000180)='syzkaller1\x00', 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000200)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000001ad", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:07 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000001000/0x3000)=nil, 0x1, 0x1, 0x49}) 10:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:07 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 10:26:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000040", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) lseek(r1, 0xffff, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) write$FUSE_ATTR(r1, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(r1, 0x4, 0x6800) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x42480, 0x0) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x5, r3, &(0x7f0000000100)="5b0426153d22960c39eff5825c00832e7c156dea90e7663828c06ebfff198b21afb72019655e0052007a37744dc7d50fa95741ef6fe3831c0e237206f457af0818c6268900c0d29e4dee3aa5e1f983cde3c900855fb16bf0181aa0640ec11c26210336131d3badb43bb3", 0x6a, 0x22, 0x0, 0x3, r4}, &(0x7f00000001c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000003", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:08 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:08 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x3eea, &(0x7f0000002d80)={0x0, 0xafcb, 0x1, 0x0, 0x344, 0x0, r1}, &(0x7f0000948000/0x1000)=nil, &(0x7f0000ebc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x7, &(0x7f0000002c80)=ANY=[@ANYBLOB="1800000000000000000000000100000085100000ffffffff007408b77280c2a33c2f7b7e75a939e0fe0fff030000183700000400000000000000007600009500000000000000d3c4a101f0c8276d2c793698007214e0b1553beb167551f0dc4254a6d5fe1ad7f474aa157d0da202c0defe0451a777cf6a6dd1bd52798d1e732aa3f3d3cfb2e3a093cacbd9361ae76c649952d174838106cc26f17bbf4fc0e773bd7c4b4715d38af8bdacb2dcabf013e567e6b0a881d386f569c9a2e1fd573b6bac66f12778aaad1f8dced4220a1a5c373c4644d2e82c50605cc4dd5bea9fcfb19522fe3281817507f1bfe9aff630df9b4c1a2e"], &(0x7f00000001c0)='GPL\x00', 0x89, 0x4b, &(0x7f0000000400)=""/75, 0x41100, 0x10, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x4, 0xfffffffd, 0x9}, 0x10, 0xffffffffffffffff}, 0x78) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(r4, &(0x7f0000001c00)={&(0x7f00000005c0)=@caif, 0x80, &(0x7f0000001b40)=[{&(0x7f00000004c0)="5f57cac492a9f9666fec5b795c3cb7d3381755ab187f14e76804a53402cf250ad21138a8d4ab51dc192879576e55", 0x2e}, {&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000640)="42ab7e106ea0501cc367cb119c99c1d93063053c335d121164e117de94ccc5206a0b960ffcff04b6f953b82b01c5460dd549f62835bd38cacc78b6d049819033c5a8842c735d9eda2033f586ea20287861f5ed92a094e54b8617713bf052c606ea9734db3dd25f188ad14fe354d8addb50270fd8f778102f8eacac6f5e5b8722199551890e33861a7aeecfa92739b643964ed9add0a66632fb59be7178c42a5b75ffda475dd189de895f8b3983e60d68c900d961be0ebd5390f7d832a6da32263d", 0xc1}, {&(0x7f0000000900)="357d2c0de9685b43294bda33ada192710573d1eff6ef0ac12316b1bdf00917999785e70d6b304caf5dca72fb8837f6032d7368d8444fd6f10630f2fde9b4c30b6c1a2bada357cad371a39548302982c0d2bcf4b67f031b345da88c564d15ce74969801ab97c54b99c0780bbdbea6bd585c913cf328bfa8f303cdfb403dde5e9bae2c5e4c68be038df4142eba03bca98c226973ae9bff4fe3ba0414921c3d14756c86b4e825775f717f267f10600a61b857fdacc3fdfcf711821095adb0ecd793f3", 0xc1}, {&(0x7f0000000740)="17d4e9efde85c181a95015b842eab77d4aa8c190ef25d4edf53f3b8da488d1d6dbed958a905dcdba22c165986ad335203d5c226bab56667f693996440623ed3dc67c6c792a8d81d7fb63b169968d77ff6e7a70607bf1de171733ae675b06ea519d70e05767fc456e2aab339588fbe3029ec34664ff561c63a3e6bc71edea4f8abe", 0x81}, {&(0x7f0000001b00)="057e5dc14ddb704b87ed31ca1d1681ccfb38", 0x12}], 0x6, &(0x7f0000001bc0)=[{0x40, 0x103, 0x600, "4920d0a7022f980c1d32f74a36f99ed978e46f5fe88f7b4d0d0c2ad7a8c93cdcdd802fa2dfc6672c6298fe"}], 0x40}, 0x841) recvfrom$l2tp6(r0, &(0x7f0000000340)=""/36, 0x24, 0x40010002, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000006ec0)={r3, 0x10, &(0x7f0000006e80)={&(0x7f0000006e40)=""/6, 0x6, 0x0}}, 0x10) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000000300)={0x6, 0x2, 0x10}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000002c40)) open_by_handle_at(r7, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000002000000d9da01000000010101000000000007000000000000000000cfdf292687b22d0d269469475c78f686114ac2bd273344278939c84502b0c27baf8e421f260f8c93253b7f5192236d14e1681cf5178a023754db55b010d92348e33257f37e59f783de7ee54e7f853ac4e9f49db4f37d482a039208bd55d2dfba976e8009a138410e552a381700320018baebf72140937029047579de2de62c0584884d2a52fe24418855eadc4589c7"], 0x10100) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000006f00)={0xe, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000007106000000000000ffff000018330000050000000000000000000000850000007d00000001039c0081000000180000000700000000000000030000009500000000000000c0bde5be1d43f0d1738bede600b38cee2a83c5b4d8ff53f156d53d301bf2d3d29ab940576d76ab433b6160ced25af46201739fb56ecd145e4d4e7ac253775c5f70d92d730cc611c0ee64083f078fdc103d2e412b8af4f74a02cc28dce736676ac71eeb870b1b82d40c6e39de51a2e189506f1d17996e4f44cb5bd257aa45a00fd3c140f702f099a6f0ca39de391d97c291d9337de5edf3570051245e1d19d4493a5e11"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xf5, &(0x7f0000000800)=""/245, 0x40f00, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000006dc0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000006e00)={0x1, 0xb, 0xfffffffe}, 0x10, r5, r3}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000050000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x5, &(0x7f00000001c0)=""/5, 0x41000, 0x8, '\x00', 0x0, 0x1d, r1, 0x8, &(0x7f0000000200)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x5, 0x3, 0x401}, 0x10, r5}, 0x78) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000001c40)={0x0, "b628f9d7c81e6af6a6140c502ba008fa"}) 10:26:08 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 10:26:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000088", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:08 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x21f6a72366e72e00, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:08 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000040)=0x40, 0x10000) 10:26:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:08 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:08 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'ip6erspan0\x00'}) 10:26:08 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100800, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f00000000c0)={0x0, 0x0, r0}) close(r2) sendfile(r0, r1, &(0x7f0000000080)=0x79, 0x7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:09 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) 10:26:09 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:09 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f0000000240)="de4941868181392e1bd15a63192a7aca410e3c6e1cdae73e9b8898760473aee605c8a04dc993dcdfe8dcdea73fd5f79ca531b2368ecd5f8d2f174ce153b589c425ff9cb86386879231770db21d52708a4372d051386d943356ebd3c0c3ded82d167f75e9aaf67ee6a9ee9522b86dc5ea94e11b1b86bd", 0x76}, {&(0x7f00000002c0)="5ffed6ec02af39820e9bed320ccbd45cf1da4395186a5bbca4026cb3b5abb3ab87be4e15019194344af756b9dfeae64396cf52983c6a78aba5d363d52e589667c7a3d4aaba30402a0b6a67d956095af2ae4e74060d0af52b6fc9894c8b8da759434ad166d0e2ad053840d9087b4fe5b0466a88096f77e3becaf0b4c1189faf6ebec66aad5866e67ffeb881ca7f5254ac9ec2a424277dcbf9a0c27d01a8482d9da5565e3d7aecc884ba40e37523c42d54fe06d1935266bf5f3c112fae22932f99f2639ad45679e3bf70ee0e6bb808b3471f839fce108ba05cfc85cd58be56f54973e12bf36483", 0xe6}, {&(0x7f00000003c0)="fd0e0b318a4ca1201638aafffa6d483312bf343c7cef4a8ffd09ac0bde0248d8d4fba171229a68998508ed070ff34ad0b7652d2ef3e2cf3ea59f6c6ce20afee246", 0x41}, {&(0x7f0000000440)="252e6ca988d1d6b8b36d657f331e32089c3a4d64fbd7937cd76ab7c8a02bcf484bdcc91c5d462a468de848742b57db6fb6f49460f48cc5709b873f9ea25ad993e4bdb1c7f78829c055f2de79e0435e55e507a1b38f28e8a9cab1442751d6e99a4df6919279ee20d7e16a474fc53ef3f15080fb5127eb73f2469fd9a03c35c61e8ceb708a8413b8f30c5a1550c348a2b3", 0x90}, {&(0x7f0000000500)="8cea67539eeffb06fe48daf55dd8ea525680bfb6d38aeae10dce3b20e413782659d2c77fec876ae99e82064f92ed71c7a3d7fa556e2ec5f255af1ae9f36f25d539961bab58e6ff35e981db53111b65cb29373cdea4a88433fa0e62c800ff51b1b57ad8bd77cc35f2e7891becb5c02559ddf0c2f2dcf7267dcf347fa550c37c1a406a4cafafe6caedda69dd15b1ee4528e386b34458666c4cd2e327e989e7323bc8f24a49da800ff6", 0xa8}, {&(0x7f00000005c0)="64a64413e56fa38aa430cb582b410a560f8447904470150c89bb548a3dd5d09a23483b299d7106276452227657178a27054131b5bd346623a951180b75b1b79f94fd4b432f4ac52df87ee8720fa22988c154c6e52eba5cebe49aa01293", 0x5d}], 0x6, 0x8) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) open_by_handle_at(r1, &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x2, 0x4}}, 0x521000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0xa0000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000780)=@assoc_id=0x0, &(0x7f00000007c0)=0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000800)={r5, 0x40, 0x672, 0x5, 0x9, 0x2, 0x194, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}}, 0x7, 0x2, 0x90c4000, 0x3, 0x5}}, &(0x7f00000008c0)=0xb0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000740)={'veth0_macvtap\x00'}) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x10, 0x2, 0x2, 0x5, 0x20, 0xf8, 0x9, 0x0, 0x9, 0xe0, 0xff, 0xae, 0x1e}, 0xe) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000100)={{0x2, 0x4e20, @multicast1}, {0x306, @local}, 0x3e, {0x2, 0x4e23, @broadcast}, 'netpci0\x00'}) 10:26:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000007f", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:09 executing program 0: sendmsg$sock(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000240)="9fb70c532f20f62df62b82015a5db075aea7f72d2caf3266e5d4512e58eb3b45c2ea8b5e6b922447e5f44fb7382635f0b8bc5b5b992b", 0x36}, {&(0x7f0000000280)="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", 0x1000}], 0x2}, 0x8040) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f0000000040)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/107, 0x6b}], 0x1, 0xffffdf5a, 0x6) 10:26:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:09 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000009e", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:09 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x4) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000001680)={0x1, 0x0, 0x1, 0x3, {0x5, 0x6, 0x4}}) sendfile(r0, r0, &(0x7f0000000080), 0x10001) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000040)) mmap$IORING_OFF_CQ_RING(&(0x7f0000452000/0xa000)=nil, 0xa000, 0x0, 0x59032, r0, 0x8000000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000100)=""/198, 0xc6}, {&(0x7f0000000200)=""/187, 0xbb}, {&(0x7f00000002c0)=""/51, 0x33}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000440)=""/172, 0xac}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/129, 0x81}], 0x9, 0xb7, 0x2) 10:26:09 executing program 2: write(0xffffffffffffffff, &(0x7f0000000180)="240000002000993e2843841615cf2a0e02bec3399299f616cd551adbb921a7c93bea814db5171ba166c793486792b017032303f65ea143023d8bfca6bd2013d3d3e0fb4b3b66e4806cb061d171c6a3b880f4d56f659d007539f6542f6cf9ae4331989455a7bcac456b60369ce4eeee3a36d96f62a59f43b4d7174d06", 0x7c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'macsec0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:09 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:10 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000100)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:10 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:10 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4, 0x4010, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 692.959960][ T2751] __nla_validate_parse: 56 callbacks suppressed [ 692.959980][ T2751] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:10 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x200800, 0x0) io_uring_enter(r1, 0x11c, 0xbcc, 0x2, &(0x7f00000000c0), 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x0, 0x0) 10:26:10 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 693.042250][ T2752] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 693.071583][ T2761] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 693.120594][ T2763] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:11 executing program 2: r0 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x200, 0x81, 0x11}, 0x18) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:11 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x900]}, 0x8) syz_io_uring_setup(0x6b6, &(0x7f0000000080)={0x0, 0x4571, 0x2, 0x1, 0x228, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:11 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 693.519157][ T2778] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 693.596041][ T2784] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 693.641371][ T2783] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x3400, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:11 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) [ 693.685933][ T2790] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:11 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_io_uring_setup(0x2a75, &(0x7f0000000040)={0x0, 0xb382, 0x10, 0x2, 0x250}, &(0x7f0000c2f000/0x4000)=nil, &(0x7f0000160000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) 10:26:11 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00'}) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6gretap0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) [ 694.015727][ T2803] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:11 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 694.075106][ T2805] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:11 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:12 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) syz_open_dev$mouse(&(0x7f0000000100), 0x8, 0x11b80) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000011c0), 0x143241, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000040)) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r2, 0x50009401, &(0x7f00000001c0)={{r3}, "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"}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:12 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000f17000/0x3000)=nil, 0x3000, 0x2000006, 0x110, r0, 0x8000000) syz_io_uring_setup(0x20de, &(0x7f0000000040)={0x0, 0x2f99, 0x4, 0x3, 0x34f}, &(0x7f0000c0a000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r6, r5, &(0x7f0000000b00)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r7}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r3, r4+60000000}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3000005, 0x12, r0, 0x0) 10:26:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:12 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:12 executing program 2: write(0xffffffffffffffff, &(0x7f0000000240)="2400000820e63e19e899f0003be90000ed190e02b3768f7ca854bf078203e1db927a17c828472d2cc6c517a49a534c1bf1f7c13830789ab110115448f9702d4e2fd34fb3b37cf3e0236f6b7c1e704cb6af6461b90a21a09af45d8b43b7d2838b02a9bd0d10d8729ffc8eaf0571c8cfe0cb890b8290061f8f4f00581544fb9fb2145b522ef3922e0921a95d1458250bc41daccf8efd37b3756ade588d1f1c6b1af806cc744efcfeaa", 0xa8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) fchown(r4, 0xffffffffffffffff, 0xee01) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x7) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000040)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:12 executing program 0: ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0xc, 0x101, 0x4, {0x5, 0x8000, 0x8000}}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f0000000b00)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r4}}, 0x7) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x0, @fd=r1, 0x4, 0xff, 0xde, 0x0, 0x0, {0x2, r4}}, 0x0) 10:26:12 executing program 4: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={&(0x7f0000000100), 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)=""/93, 0x5d}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000040)}], 0x3}, 0x40033142) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) close(r1) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee01) 10:26:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:12 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:12 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x8040, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:13 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'batadv_slave_1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = signalfd4(r0, &(0x7f0000000040)={[0x26]}, 0x8, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'veth0_virt_wifi\x00', @broadcast}) 10:26:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x5) r2 = openat(r1, &(0x7f0000000000)='./file0\x00', 0x48043, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x35}, 0x20, 0x0) 10:26:13 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:13 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x2) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:13 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000400)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fchmod(r1, 0x80) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x42011, r2, 0x10000000) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000280), 0x111400, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000340)={[0x1, 0x4394, 0x9, 0x8e32, 0x1, 0xbf, 0xf2d, 0x20, 0x8001, 0x7ff, 0xe6e, 0x40, 0x9, 0x1, 0x837e, 0xad9], 0x3000, 0x200402}) syz_io_uring_submit(r3, r5, &(0x7f0000000240)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd_index=0x1, 0x4, &(0x7f0000000200)=[{&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x4, 0x14}, 0x101) fcntl$setlease(r2, 0x400, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000040)={0x1, 0x8, [@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @local, @random="2d3593a3f412", @broadcast, @empty]}) r7 = accept4$inet(0xffffffffffffffff, &(0x7f0000003800)={0x2, 0x0, @multicast2}, &(0x7f0000003840)=0x10, 0x800) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000003880)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:13 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:13 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:14 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x81, 0x412000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'team_slave_0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r1 = fcntl$getown(r0, 0x9) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) fchown(0xffffffffffffffff, r2, 0x0) recvmsg$unix(r0, &(0x7f0000002980)={&(0x7f0000002580)=@abs, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002600)=""/226, 0xe2}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/126, 0x7e}], 0x3, &(0x7f0000002800)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}, 0x40000000) r4 = getegid() setresgid(r4, 0x0, 0x0) getgroups(0x8, &(0x7f0000000380)=[r4, 0x0, r4, r4, r4, r4, 0xee01, r4]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x3, 0x492, [0x20000500, 0x0, 0x0, 0x200006a6, 0x2000099a], 0x0, &(0x7f0000000340), &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="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"/590]}, 0x50a) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(0xffffffffffffffff, r6, 0x0) r7 = getgid() newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(0xffffffffffffffff, r8, 0x0) getresuid(&(0x7f0000002e40), &(0x7f0000002e80), &(0x7f0000002ec0)=0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, &(0x7f0000003000)={&(0x7f0000002040)={0x50, 0x0, 0xff, {0x7, 0x22, 0x1, 0x16000a0, 0x9464, 0x59f, 0x52, 0x1012}}, &(0x7f00000020c0)={0x18, 0x0, 0x24, {0x3}}, &(0x7f0000002100)={0x18, 0x24, 0xffffffffffff660d, {0x2b}}, &(0x7f0000002140)={0x18, 0x0, 0x5, {0x1}}, &(0x7f0000002180)={0x18, 0x0, 0x0, {0xc7a}}, &(0x7f00000021c0)={0x28, 0x0, 0x1ff, {{0x8e, 0x7821, 0x0, r1}}}, &(0x7f0000002200)={0x60, 0xfffffffffffffff5, 0x4, {{0x3f, 0x0, 0x5, 0x8, 0x3f, 0x8, 0x3, 0xf77}}}, &(0x7f0000002280)={0x18, 0x0, 0x2, {0x5}}, &(0x7f00000022c0)={0x11, 0x0, 0x1ff, {'\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x9, {0x0, 0x8}}, &(0x7f0000002340)={0x78, 0x0, 0x100, {0x2e13, 0xdec7, 0x0, {0x3, 0x1, 0x2, 0x3, 0x6, 0x7fffffff, 0x4, 0x4, 0x1, 0xc000, 0x1, r2, 0xffffffffffffffff, 0xd90, 0x70d}}}, &(0x7f00000023c0)={0x90, 0xfffffffffffffffe, 0x100000000, {0x2, 0x2, 0x8001, 0x1, 0xee0f, 0x9d7, {0x5, 0x9, 0x4, 0x4, 0x1, 0x7fff, 0x100, 0x80000000, 0x7, 0xc000, 0x5, 0xee00, 0xffffffffffffffff, 0x5, 0x7}}}, &(0x7f0000002480)={0x68, 0x0, 0x9, [{0x5, 0x5, 0x2, 0xef5d, '^{'}, {0x5, 0xfffffffffffffffa, 0x0, 0x1}, {0x3, 0x2, 0x1, 0x9, '^'}]}, &(0x7f00000029c0)={0x468, 0x0, 0x80000001, [{{0x4, 0x1, 0x8, 0x4, 0x2, 0x5, {0x1, 0xff, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x3, 0x0, 0x8, 0xa000, 0x5, 0x0, 0x0, 0x3f, 0x2}}, {0x1, 0x6, 0x1, 0x1, '{'}}, {{0x4, 0x2, 0x7e24, 0x5, 0x4, 0x5, {0x2, 0x56, 0x9, 0x5, 0x4, 0xa9d, 0xf69, 0x6e, 0x9, 0xc000, 0x3, 0x0, 0xee00, 0x6, 0xcd}}, {0x6, 0x10000, 0x0, 0x4}}, {{0x4, 0x1, 0x7, 0x10001, 0x401, 0x10000, {0x6, 0x8000, 0x7, 0x81, 0x200, 0xfff, 0xcd, 0xfffff8f8, 0x2, 0xa000, 0x1, r3, r4, 0x569a, 0x8}}, {0x3, 0x6, 0x4, 0x7, '\'@@\x00'}}, {{0x2, 0x3, 0x1, 0x5, 0xfffffffe, 0x7fffffff, {0x0, 0x8000, 0x800, 0x0, 0xe2, 0x3f, 0x7ff, 0x7, 0x1000, 0xc000, 0x4, 0xee00, 0xffffffffffffffff, 0x5, 0x9}}, {0x2, 0x7, 0x3, 0x0, '++!'}}, {{0x0, 0x0, 0x3, 0x1000, 0x0, 0x800, {0x0, 0x10001, 0x6, 0x52, 0x10001, 0x454, 0x1, 0x4, 0x7f, 0x4000, 0xfffffff7, r6, r7, 0x2, 0x3}}, {0x0, 0x2, 0x6, 0x3, '$\\.*:\xdd'}}, {{0x3, 0x2, 0xce, 0x5, 0x101, 0x8, {0x0, 0x10000, 0x9, 0x57, 0x8000, 0x4, 0x5, 0xc49, 0x20, 0x8000, 0xfff, 0xffffffffffffffff, 0x0, 0x4, 0x9}}, {0x3, 0xe9b, 0x1, 0x6, '\''}}, {{0x6, 0x1, 0x1000, 0xfffffffffffffff9, 0x400, 0x1000, {0x4, 0x401, 0x100, 0x88d9, 0x400, 0x100, 0x6d, 0xc6c, 0xa1db, 0x2000, 0x40, r8, 0xee00, 0x26, 0x800}}, {0x1, 0x81, 0x6, 0x7, ')-!&:!'}}]}, &(0x7f0000002f00)={0xa0, 0xfffffffffffffff5, 0x10000, {{0x3, 0x1, 0x7fff, 0x3, 0x136, 0x3ff, {0x6, 0x8, 0x6, 0x3, 0x8, 0x7fffffff, 0x82, 0xfffffffa, 0x593, 0x4000, 0x271f32d3, r9, 0xee00, 0x388, 0x400}}, {0x0, 0x3}}}, &(0x7f0000002fc0)={0x20, 0x0, 0x5, {0x461063a6, 0x0, 0x5, 0x6}}}) 10:26:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:14 executing program 4: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000380)={0x7f, 0x0, 0xff, 0x0, 0x47, "35160162b529caad40bf67581d35d30d9a1748"}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000000680)={{r1}, 0x0, 0x4, @unused=[0x101, 0x0, 0x835, 0x53e39644], @subvolid=0x8000}) r3 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000001940)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f00000000c0)={r4, 0x1f, 0x3}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000940)={{}, 0x0, 0x0, @inherit={0x78, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000060000000000000065000000000000000900000000000000200000000000000005000000000000000008000000000000070000000000000000000000010000007c00000000000000fd820000000000000600000000000000bbaf00000000000007002000000000000800000000000000"]}, @devid=r4}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000100)={r4, 0x6, 0x1, 0x1}) 10:26:14 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) write$binfmt_aout(r0, &(0x7f0000000700)={{0x107, 0x6, 0x1, 0x35d, 0x217, 0x6, 0x13f, 0x6}, "ea34d603a8e374e485fba82f1b7fd7c161c8772e76209fb0487deedc58bf44f4484cd4629f1774f757a42670efef25ee19354d1021e2ee1a39cf0164493a2375242c69a55e119181688e3078604f0fd5f134a1f91d96b6b5de8be2fffba1a661a90d7130b9ffb49fac3448ad1a62c27bd83f02ef2e79f3f9437045adebe74f45", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a0) fcntl$getflags(r2, 0x401) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) dup(r3) 10:26:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000040)=0x5) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080), 0x9, 0x2000) syz_io_uring_submit(r1, 0x0, &(0x7f00000005c0)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r3, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 'macsec0\x00'}}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=[{0xd8, 0x108, 0x10001, "0d3a2122021910562cf802c65cc85cfb0f09719fb462b0453e52035deeb59046e7a26e6e1f3acf9ad3e2d8166124dd336b6131bc0d2dbcb417c3936a78bb5c30e6afa1ed1fe720c862d8f45b224f17dd287bc6069aea4a048fa56123bc6e99b54859ac0b02d844b8854cbb39ba50d1071ee6bdad920f670df610ecc4e96695e50f6dbb0a2c2dcd83c2aa65e98d290683d2da3d532523357536c7353bdd7d53478bd04cb15b59f210da0be299076d758edd4c1e710db536c72f5a611bad16e5d81e"}, {0xf8, 0x119, 0x7d, "f90ffd34caf59d264be2abbe6edcaf8d58d0aac2ab55e25397429c177828e9b4cb741a7729ede0f89ee7cadb01503fffd733dc9b9f8cce93af68e2fc140a76c60924ea7d6cac0b293edf9e0e13e846052d64c50b5727ecf86d2ec84965b35115a9cb3b7fbdcce6baf73e74bac60bb8ba654c06a09824ea51718640b411d9373a7e8570e4d3d248a3a58435151be71bf848346ba1018a09da55c6acf673b2b0d2421417992bd262fbb2d7185339e63a8cc4eccc32cbbae26b31280ddd9ce2fd5935bc63c5845f17d5a2f2825bfccdc21735e01a73d95c47bf0767a3be7800777ebcf7e618f8"}], 0x1d0}, 0x0, 0x8000001}, 0x7fff) 10:26:14 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x34, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:14 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)) 10:26:15 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:15 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:15 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r1, 0x401) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'vlan0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) 10:26:15 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:15 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:15 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0xfffffffd) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000140)) 10:26:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000088a8", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:15 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:15 executing program 0: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000003cf7e1e2a022e7ea63d5e840a2d22aedc1dc66bb4ffafbde0bcf3d50c58a6977f9f1b68d1bab98c58c0a8de12ec405ae71fd385c9fd5af8862d4adcdacbfda217c5924490aedbe2751ae9af5e9031387e5faa3a417e9fe108ce9db28bcc13fd0682c156543c9c9e41217699f7163a0b1c7b42f57f4862630e7ceb1b1d322f88678ef3ac01097ac5268d730f7", @ANYRES16=r2, @ANYBLOB="01000000000000000000050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r2, 0x2, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x24005800}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000040)=0xc36d, 0x0, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) fadvise64(r3, 0x78, 0x5, 0x4) 10:26:15 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 698.066994][ T3052] __nla_validate_parse: 52 callbacks suppressed [ 698.067014][ T3052] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 698.150392][ T3059] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:15 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000100)={0x2, 0x3f, 0x5, 0x200, 0x4, [{0x1, 0x8, 0x485, '\x00', 0x408}, {0xeab4, 0x800, 0x3bf7, '\x00', 0x1000}, {0x80000000, 0x9, 0xc52, '\x00', 0x100}, {0x9, 0x9, 0x0, '\x00', 0x1}]}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) [ 698.194272][ T3062] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 698.242902][ T3066] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:16 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) pidfd_getfd(r0, r1, 0x0) syz_io_uring_setup(0x7a3a, &(0x7f0000000040)={0x0, 0x15ee, 0x20, 0x3, 0x18a, 0x0, r0}, &(0x7f000037f000/0x4000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0x0, 0x0, r0}) 10:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:16 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) sendfile(r3, r1, &(0x7f0000000300), 0x200) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x400000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f0000000200)="00000000020001000003be8800002000", 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x89ff}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8b}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffffffff}, @CTA_SYNPROXY={0x2c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x35250f1}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4044850}, 0x8040) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x5) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000100), &(0x7f0000000140)=0x4) 10:26:16 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 698.529619][ T3076] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1c00, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 698.575707][ T3079] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 698.610052][ T3082] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 698.640148][ T3086] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:16 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000040)) 10:26:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000007fff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:16 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 698.893739][ T3104] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:16 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'gretap0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)=0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) [ 699.011987][ T3105] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$int_in(r0, 0x5452, 0xfffffffffffffffd) mmap$IORING_OFF_CQ_RING(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r2, 0x0) 10:26:16 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000009eff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0xc}, 0x10) fchdir(r1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x12, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000f0ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:17 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3400, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:17 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = syz_open_dev$dmmidi(&(0x7f0000000100), 0x2, 0x151482) fsync(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xffffffffffffffff) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 10:26:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) io_uring_enter(r0, 0x791c, 0xbd13, 0x0, &(0x7f0000000080)={[0x1]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x16d36000) syz_open_dev$audion(&(0x7f0000000040), 0x4, 0x101000) 10:26:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000ffff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:17 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000100)=""/248, 0xf8}, {&(0x7f0000000200)=""/174, 0xae}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f00000002c0)=""/23, 0x17}, {&(0x7f0000000300)=""/49, 0x31}], 0x5, 0x2, 0x81) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:17 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000040)) 10:26:17 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:18 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:18 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:18 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x202540, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:18 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x440003, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000088e2cae1cec8da320703000000000000000000070000040900010073797a31000000000800054000000001080005400000000309000100"], 0x3c}, 0x1, 0x0, 0x0, 0x4015}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0) preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) accept$unix(r1, &(0x7f0000000300), &(0x7f0000000380)=0x6e) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021802091a0000002bbd7000fedbdf2505001a00e000000200000000000000000000000000000000000000000000ffff640101022300040402000a0000800000010000000000000002000b0000020000060000000000000002000100000004d620ce4b010000000002001000000004d3000004d200000000010014009e00000005001900000000000002004e20ffffffff000000000000000005001a00ffffffff000000000000000000000000fc0100000000000000000000000000cf2b000400"/208], 0xd0}}, 0x800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x380000a, 0x80010, 0xffffffffffffffff, 0x4dde1000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x20, 0x3}, {0x1, 0x1}, 0xa9, 0x5, 0x6}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'sit0\x00'}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000006c0)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000700)={{r3}, "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"}) 10:26:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:18 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:18 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24c600, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:18 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x7f, 0x4, 0x1, 0x30, @empty, @private1, 0x80, 0x7, 0x120000, 0x1000}}) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getnexthop={0x3c, 0x6a, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r2}, @NHA_OIF={0x8}, @NHA_ID={0x8}, @NHA_FDB={0x4}, @NHA_GROUPS={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x4004005) 10:26:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0xf}}, 0x0) 10:26:18 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:18 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:18 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x30, r0, 0xcdb21000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:19 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0xf97, &(0x7f0000000140)={0x0, 0xe28, 0x0, 0x4, 0x3cd, 0x0, r1}, &(0x7f0000949000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000080)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x77359400}}, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x10}}, 0x0) 10:26:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:19 executing program 4: perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:19 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'macsec0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x23}}, 0x0) 10:26:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:19 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) statx(r0, &(0x7f0000000040)='./file0\x00', 0x800, 0x2, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x50, r0, 0xffffb000) 10:26:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:19 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x80, 0x311200) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'veth1_to_hsr\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r2 = signalfd4(r1, &(0x7f0000000140)={[0x4]}, 0x8, 0x800) ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff) 10:26:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x2c0}}, 0x0) 10:26:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:19 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x0, 0x8, 0x0, 0x1, 0x0, 0x128000000000000, 0x20010, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x6}, 0x60, 0x0, 0x6, 0x7, 0x8, 0x200, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) sendfile(r1, r2, 0x0, 0x5) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_newroute={0x48, 0x18, 0x400, 0x70bd26, 0x25dfdbfc, {0x80, 0x0, 0x10, 0x1, 0x0, 0x3, 0x0, 0x9, 0x800}, [@RTA_SRC={0x8, 0x2, @rand_addr=0x64010102}, @RTA_PREFSRC={0x8, 0x7, @rand_addr=0x64010100}, @RTA_UID={0x8, 0x19, 0xee01}, @RTA_PRIORITY={0x8, 0x6, 0x5}, @RTA_MULTIPATH={0xc, 0x9, {0x8, 0x1, 0x3f}}]}, 0x48}}, 0x4) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x2) 10:26:19 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:19 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008010}, 0x40850) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x5) r3 = openat(r2, &(0x7f0000000000)='/proc/self/exe\x00', 0x8880, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 10:26:20 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0xec0}}, 0x0) 10:26:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:20 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0xfffffffc) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:20 executing program 0: ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x1, 0x2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:20 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) fsetxattr$security_evm(r0, &(0x7f0000000040), &(0x7f0000000100)=@md5={0x1, "2d9093a8ca1916939495f943c02e225f"}, 0x11, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000000140)="e7e964b7584c6e3a7a02016b5c201eaba1c98eb4febb6d18ba65a7111bfcef135d2cd918ffbd2912d5e5d51935b855e8207e6ff30b7c53086f08cdeb0f15f021c6ab66a07679a5f3c9fec83660dda5fd174b2e49a890b8f2094ac1450a11863b60ecb47a3e511e9f261cc4737e8b53693b535f375537d87ccb07455f0ddd2de21890b108d47f6de42e3a067ed12333b0fee204bd63d27f0b582124ded99782352734d0c6dee6f03e6fe84f4f179cb0131d", 0xb1}, 0x68) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x33fe0}}, 0x0) 10:26:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:20 executing program 4: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454cc, &(0x7f0000000000)) 10:26:20 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001500), 0x288480, 0x0) preadv(r1, &(0x7f0000002800)=[{&(0x7f0000001540)=""/103, 0x67}, {&(0x7f0000000100)=""/230, 0xffffffffffffff16}, {&(0x7f0000000200)=""/237, 0xed}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/131, 0x83}, {&(0x7f00000013c0)=""/9, 0x9}, {&(0x7f0000001400)=""/237, 0xed}, {&(0x7f0000001500)}, {&(0x7f0000001640)=""/204, 0xcc}, {&(0x7f00000028c0)=""/191, 0xbf}, {&(0x7f0000001500)}, {&(0x7f0000001800)=""/4096, 0x1000}], 0x100000ac, 0x3e8a, 0x7f) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x8010, r2, 0x10000000) 10:26:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x20000aac}}, 0x0) 10:26:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:20 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3f}, 0xa) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:20 executing program 4: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454cb, &(0x7f0000000000)) 10:26:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x7ffff000}}, 0x0) 10:26:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:20 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = inotify_init1(0x80000) write(r0, &(0x7f0000000040)="f7c5c62d5590fdef45dd70709b3116d50645b28149baa515af0fd89eeb836e3e5769f190453994d45d5d1469176c5b5900c406c2da6fcd505b6d6b714015bcba", 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:20 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:20 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x404001, 0x4e) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) syz_io_uring_setup(0x1db9, &(0x7f0000000040)={0x0, 0x7bdc, 0x1, 0x0, 0x2f0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000c8a000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x6338, &(0x7f0000000180)={0x0, 0x160c, 0x8, 0x3, 0x3bf, 0x0, r1}, &(0x7f0000ace000/0x3000)=nil, &(0x7f0000b00000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f00000008c0)={0x5, 0x8, '\x00', 0x0, &(0x7f0000000880)=[0x0]}) vmsplice(r1, &(0x7f0000000800)=[{&(0x7f0000000340)="d2ac37d7582fb394855770366a77c6000aa1b9667eae5707f98c972d3650cf6c1bf8b1adacffc730c3a3680168067b9adf9bbead829f64f24edacbd50b04d6c13f4b", 0x42}, {&(0x7f00000003c0)="e3e1270c8c5048e17289e095dc6c1f283da8a774839fe3a3ae99d08888f4b9e6c158fc622c84a7dc9fa5060ccb88b970095e96a0eca7e75182ba54fae3cab5b3ee87e94d96df222c50e11fe8511651b102f5492ba4b40df729a8668a84753220b283ec94274effbd5ee1acb9872b401c5adfacee8ea8fd94e9186803a7670d78ad0c61c7e6772640b75e8c2f1ecb211f3101130f1e4ec11793f73e10780af6c0676243aba44e74eaccf284fdea622ba525c2df87cef1a020ba1f2792c39c3a73a7f896c37f87f395b8d438b3ae280c7a1cb9542110db2816dd41b37b0b01d4ea728b65a5393b90a1ffdd212f", 0xec}, {&(0x7f00000004c0)="78453bbccc8b922d4d383148f99af8df951b872c805dbe297e76e625ef340f2fb83e1bc0cf0e607bca73842621b14871dc2e4af534f38274b0a257f12c9e397ee41f97d85634add364f42aad66c7deae24c097e95b0f8c5894e228ff01e7aa9074503d58de112b36d45243307afd218f12e8022129c09f21d316fc", 0x7b}, {&(0x7f0000000540)="b05872580dc0611d4740ea17390a9fec8c166d99ad015056a671426086bf20da69574e3615fca5e44832b2bd0a2b64119e6aef5405bf55ddd0a0664c1ddc20a023bb494a61abb1ffcdbf3ead43c42940f0c70d57d85b48445f4314dca9acb96fd77c1c5f19febfccf8691b8202d6469d83039bd31536fe5bcd62d2844a9b9e7a08c04dc2af98e8d782b15b9f65088f5c76048afc772cacbedc1abbb88b18e6cd0e3059665c4ed8", 0xa7}, {&(0x7f0000000600)="7e68b8b8d2260b675e6bd3a0184044cbf290748ec7db17c62034364481cc21b9c57f0e72e9dd4ce67dac4f5b7bbf3516dadf8e0a482575604d89b3e6c427e4985c6ba4684aefba977355784ae42e590ca85d33d90de61d4acdba8f77a4c9a343d06ce685b72e60971acb556fede5c523df901e45d628a6fd1fcc2f4eedf73ef8f3fdb581a2ea8f1d45d51f62928506758294dcf37c7b634f6ce59d30640aea", 0x9f}, {&(0x7f00000006c0)="b3a86095d2446dcd37f5d3fffe8b1d", 0xf}, {&(0x7f0000000700)="4b54810d21ec04c7eaf042f42c2c45ac54217d502928c1e1e437f23920790f31f512bea3359de624554c1ce4f6c9c25b13a870c827b0055a3d374b6c7d4e2363f3f2871b2a4cdcfffb9e5efdd5dadf1ddb820881d851fd20ce60e51e5852a16b67fb32858417bff4b1f3685ba83343ef99c9af0139ab99db7dbc5dc3b8a2a13ebda659c52bb9681ce60eec834e0c2888a440050b7cd5b633438250620e4390939c5a1f72d68f16475845aa237f2d84558a5557f97918afc46a273e54e5275d1324f1ad45b6b1a3aca49bb929180a3d850db4d7cbbeb7b68a5d7a4fd3db1cfdb6694d7b036e832efe74bdbbdbc8c5c556f09e0a75386f06c7f1042bbddd", 0xfd}], 0x7, 0xc) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x400552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000900)) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000940)) syz_io_uring_submit(r6, r5, &(0x7f0000000b00)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r7}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000300)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000280)="128c4fb633eb4db98ad682eaf1e3c24b21d4ed25d254d32e7ca423f32dcaf4428e6f71894ed3fb8538fcb418066cfb5b92e70e68f70f543911c3a32630af6f55a2da8af3e28d12f55f67ee03c6216accf10254c1d4fd316a9c2c16b8c21b1d4e9705107a1249cba71e", 0x69, 0x20000080, 0x1, {0x0, r7}}, 0x2) [ 703.165680][ T3354] __nla_validate_parse: 46 callbacks suppressed [ 703.165707][ T3354] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:20 executing program 4: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454cb, &(0x7f0000000000)) 10:26:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0xfffffdef}}, 0x0) 10:26:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 703.277657][ T3364] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:21 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x40a080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8100, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000340)={0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{0x7}, {@void, @val={0xc}}}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, r6, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0xffffffffffffffd0, 0xfd, 0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "8f306237e0e5c659465d9a1089c28cc2"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_SSID={0x11, 0x34, @random="8c9ca135e65e19e32afe8a6d30"}, @NL80211_ATTR_PMK_LIFETIME={0x8}, @NL80211_ATTR_PMKID={0x14, 0x55, "31633ecf93f6826f7433d9c76b2a7880"}, @NL80211_ATTR_FILS_CACHE_ID={0x0, 0xfd, 0x8e3d}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x57}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400c0e0}, 0x20008060) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000140)={&(0x7f0000000700)=""/4096, 0x1000, 0x4, 0x7fff}) 10:26:21 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x140000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) 10:26:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:21 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x2}, 0x0) 10:26:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 703.551648][ T3381] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 703.602194][ T3384] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 703.658189][ T3393] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:21 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') syz_open_dev$vcsn(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000440)) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) accept4$inet6(r1, 0x0, &(0x7f0000000100), 0x80000) getpeername(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, &(0x7f0000000140)=0x80) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x0, 0x4000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) sendfile(r0, r0, &(0x7f0000000080)=0x3f, 0x1f) [ 703.720376][ T3398] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:21 executing program 2: ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000040)=0x4) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'wg0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x7}, 0x0) 10:26:21 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 703.890040][ T3404] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:21 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 704.024156][ T3411] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 704.106612][ T3413] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:21 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'netpci0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) [ 704.165450][ T3416] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:22 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00000cb000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) 10:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x8}, 0x0) 10:26:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb00, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:22 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:22 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000200)=""/214, 0xd6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/42, 0x2a}, {&(0x7f0000000440)=""/4, 0x4}], 0x7) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x300}, 0x0) 10:26:22 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000010000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0x79a49000) sendfile(r0, r0, &(0x7f0000000040)=0x3ff, 0xc2) 10:26:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1c00, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0xffffff1f}, 0x0) 10:26:22 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) io_setup(0x7ff, &(0x7f0000000040)=0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r3) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) io_submit(r1, 0x3, &(0x7f0000000400)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3ff, r0, &(0x7f0000000100)="686cf5106b4cc43cf3dee0640da62e7de25ecf095f4d414b4b51b65f02a74795914e2e69f45afbc43eb1f78e9a968abf806159c97780337b6fe96e27370f6c7caf9b235c3c5d3ddb21590402e1228418244e9f47c3441ad5650a41c68070b068a3", 0x61, 0x4, 0x0, 0x2, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r4, &(0x7f0000000200)="8061c9d565155225f8118d0e41db3cfb9ad677c8a054f67fcf738ace336a44681b0b864468d9a920cf636e611f173ec579b61fc08b6465425522a09d5e41934e319bf5de0498baaf7335474139f62681c7b1b843d936154ecaeb7093253658af425f5a69fdc62373547785ddd87e2f2a5cb9c573fa060caea3a4c4455947c31a56791d29feec251cd43a2520f1a7e3f809d7da4cdc7a7f70680a02ece03f53f0a2bfd0ab4cc26f674161509183", 0xad, 0x716b, 0x0, 0x3}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0x2, r5, &(0x7f0000000300)="71a47d49d0c9e43b5a5efb1288914b38d6db26f72e7a52374d5633336c0c42f9f741f4f466418ec32d193c574cd9a516ca9e2ffb33411efb249edb63db563e55c217d56e987248", 0x47, 0x73c, 0x0, 0x1, r6}]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x12, r8, 0x9305d000) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r8, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 10:26:22 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:22 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f000070a000/0x3000)=nil, 0x3000, 0x3000005, 0x80010, 0xffffffffffffffff, 0x8000000) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f000067c000/0x4000)=nil, 0x4000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x0, {0x0, r2}}, 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f00001d9000/0x4000)=nil, 0x4000, 0x100000b, 0x4010, r3, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r4, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f00001bf000/0x4000)=nil, 0x4000, 0x13, 0x0, {0x0, r5}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r7, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000000080)={0x44, {0x2, 0x4, 0xffff, 0x6, 0x5}}) 10:26:22 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x2}, 0x0) 10:26:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:23 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:23 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) r1 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x5) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)) syz_io_uring_setup(0x552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r7}}, 0x7) syz_io_uring_submit(0x0, r3, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r5, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0xba67) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x81040) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) io_submit(r8, 0x3, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x1ff, r9, &(0x7f00000000c0)="4c1e3bef759d1a780c3ab03fb2f575e7ecc757f78cf392c549eecee633a60a82d2111f3774285bd5859f4c", 0x2b, 0x1, 0x0, 0x3, r0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x5, r10, &(0x7f0000000140)="56322082ca6bb6bd9ec91ceff31333e180577a311b6e1565456cb833478621b1443f7220e6f94dad17c4092b2cd5b142f1d3babe939f64dd75d2c4e784900362b597eb79be4fe5de85482a7d036a6db60b452386e1921b00306abc9866666875928df632219c1537443fd240626e8b83e4c66c86eaf42e61b79fb79324ebe40f93c317bc13d536c1e92b20101aa5ab35a3c0087f7c88098d51123d9791f3de2ec6c7c9280aff8c947b314a2cbae67a6883b50607ca205930f29dc2b6f7f9f610ac368daadef212fb7c", 0xc9, 0x1e30, 0x0, 0x1, r11}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000002c0)="a482a5376c7338e622a18bd679510ed5b4844b40c869108e9297f75d9710a2c8d3160ff78b477a71081b63031bba2a64ae5e3a650637445922ec445f7294392bbcf304b87e2c006c892bf7ccdb6409a1a0e4f9c2f9826e21aab5542bd3b8c460d645527fbddec9a246ef5fe0cb9de72ac175fba90d2c5e99902d9fe66df163cd206bd33649c819f9557c75a8e8b22143ec571f2daf86dfa9e648b00b7063d9bccf5351", 0xa3, 0x80000001, 0x0, 0x1}]) 10:26:23 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(r0, &(0x7f00000000c0)="8fbab1ee0d5a79e86d5eb984c9615b7173d00803775040ddf896fcbc882e43852b4837149a292b20dc0f1b9c4cfb8fb46c948f0fd60e20a6615388eda10921bf4679704aaa6372cedca70e4cc37c76319b9baa2a7024210c50e91e49660f1e07b20a3b987f8f1484ce3594ef2df4eac433", 0x71) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x3}, 0x0) 10:26:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:23 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3400, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x4}, 0x0) 10:26:23 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendfile(r1, r2, &(0x7f0000001100)=0x9, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f00000010c0)={0x0, 0x6, 0x7, 0x7, 0x9, 0x8}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x6000, @fd_index=0x4, 0x80, 0x0, 0x0, 0x0, 0x0, {0x2, r3}}, 0x2) syz_io_uring_submit(r0, 0x0, &(0x7f0000001080)=@IORING_OP_WRITE={0x17, 0x5, 0x2004, @fd_index=0x4, 0x11b2, &(0x7f0000000080)="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", 0x1000}, 0x8) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:23 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) ioctl$VIDIOC_G_FBUF(r0, 0x8030560a, &(0x7f0000000040)={0x43, 0x2, &(0x7f0000000100)="b26e4e60ed61afa473c5784520fd9bcbb21a04ba54d8d389cfa0b957d8635e2f5540903b4150c57fd2728c7f4b9853b431203c691509e91f9f121346331d6de80076af8ab4116ff0d6ef61d616c2df357c984ee737ce7aba90278d074c90b7f3e7643aecad7d83c1e3ced8f5606774ce5bee3eb8bb585de06ffcae8395fe22845ea3c5c10fd1b84b447abd297cb56f1e38d0e4faaa", {0x4, 0x4, 0x30314142, 0x1, 0x8, 0x9, 0xa, 0x324}}) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000000700)="959866d9528a503af343a95331157a7963f910247ad5bbffaae2046a3d18e98c8cff8dd786afc1c9458ed502fb1c209b080cf1098f242d07bfabdb1855058e92514984253945ab946f31156b128d3c2e23712acc727c0ee1b53da2438d08e8b19ef830cc8271a3c1c26168df0c854c71fbeb074d2cfe1fc9f4673a9d0ec21eaa750d006594c9a9ca237b0e70d04a3430bb577f69bc2948f45492022db1fb5692e9206160495ec8e1ffb56882fb035cd6fb38db731c43ac636ff38113de3b221602bb36be8bf25b2b952d4b6ca8d898693fc884406869c011a7f09c3124a262930bff8e933ff5a9ff812bf6b3fcef6e9e8779c12e2d6aad76fa0813e615efce171f557c498c59892d877c43785697284c1c09c9d2bbc0cd3163d14722791fa6718d2bd3d48a76f898d7be41c332d7160b5de1467919b4a1ea29f481d081f67b7382b2a5c8b6615054c2a6fcfd58ccf9a3aca91b3fcce5dbab386bef91e5eb34a312f322c9b4b8a4b8b185ad49b8e11b49e434e70be53cf40372e72a5877d27a60cb2f343280e602279e64fdec0b5c230c0b24b1742a0c0fc9c7bf46c08bd50589098ee04e0a75812058b3c2576e423797e3afa033d2d5de147a526999a2376c71dfe4577a862f8ae080dddc818a8dc5d62771ab0dadedc871ee7463c705f6bfcf37ba831467f5700ca25ee484955e8f0f118ec0726117ea0966f6fa51a13ba72af7e459312adcee42741d8c718adab0dde8d7a0c1c44a8305e2f79a7c493b92d3695a2f3ea8110a3252460a89dd487fefacbebeef8bc58a7ecff06f2717705b71587f9a65423c561122af153c4d4b1cf80ff5e8dd63372c7ebbf363c232d2918f3c13826ec91c1fceefe2be21a75f65979c22189d9e70b74f9ab5f0ea61a16ea848720c6dbaa7053a9148e92574976e836dbc38c456adeec2d27a7c52f29aef7455904aeabad6a17efbdd2a584dc70328fa335b53cb1957375dfaf74f6056f4d58f147b22a47697a076e231761feea9685de6328379a5f97e48bb7aea44a9373be328d63fd757b7ecedfde534123a277b26b724403eb0eac59fa48c9680ebf1783072ef09d02af9eabece78f554fe11a363d2587674d73f5e36f6306badacf1b2981f952cb31f7619332e644255e1a4d29cee9a98a86823b123ee782e2b3fdc8bee3b52fee435c40caac5a36b17860ee2ea1aadc8cfefb2501a35952a2c1c623c4e8c3f7537ec64b4fafe6bba595a1ead9805e63d2e974e83a0370438404dd1f2c370f7a31396088f0ddc7922c278accb898eeb26215c912f2e13186a1cef0bf0351384ef26a702b069cf77d41fec3e9c1d71cf17d09582d9eaea6f0f44826a161c1dfc100b6fd108bc0b44af317b9fd80a771f615f997a0a87a03aa9499a4f75979218b26a7bcd98e245a8864667b5435f949c014ce6207fab33bd700917c3300907062eb5c0d0427861fbfad9b783d527d0a6c2dfaf3f733c28681b2dc16ff087ba4ddea6feb7c03b1278bbf873831824442c43197c91658e96f6693914b1dc8c1f03028d1975c51007730e8cba4fed1aafadb316cf3e2a02a41744a6beb005c7444bd8a4be32266ea6a72005dcf94b13ef4d03c0bbf147ac957bb4f5ec2e8807c8438e4f38caa0caaac1e180c03d7db1825f82689e15d77f7c0390921de9054b24f32d62776db3de435066b639e81ae61ef0e7275326bda3cd92a9a7b07b7aafa0df9934ef6372bba80b166fa919073834ba9b80c3bf6bbeacf6a550a024e74a17e4da0864d40c5271c6af40b71dbd31d0566f60593ea0135f989a2036dc0bd3aa7f56d8ee651c5cd58c0b370d3fbe63645bd1480df72e3c6fb05c50cd8d13e9a3f34a39774fb5556e9f8709d72accd7ba3ec784a07dff7cb5fcbd6430ae6641fb84039ad1687e6273ca08a3608fd793b06041b278de14699c9ef3fa7d337f5f0ab87ede0fb9fdf87b9a6c43b76213d81fbbc0afe41c681d9f1255cdf68f926ba91b012337d4247510d8d0969abeca76a260ebf673eaed8f42d8ec215c4b2bb9038044b72caabf9d22e81b17a100d41ff9ecc31d14c887e9736e7c82187537a6259428d48b0721bc0f87ec04c65e147f95de0d30827304a9c0e14b64409cdc7730d7ce318952cc4837cfb81efc6bae76363d05369993021f6bdce29f4ba852d0b6c07c166209a76f8a34b7875fd2fa7ca3c14feb5ac75007cce4d18da2245bdb607466411915b439801fe2d8f0a5988a080452e4b381d7569017e821594cc25eef6ca94351396045243b43251a740efbdefcd0eabb5013b21fe3d41f679199df99df160283ba5775659777ab7d525a5005cc982d1e82f6266096c72eb2a8e9ce26fe62bf67a4587a955a0bc8500fb4d798ed347eb49c62ba6b7911e547764aea79a4ee046b38faf5025165a7714a66da66b79613f656ac64b5678ed9c7a6c8196bd191824f3b362e919473597c648926f42954e3c6d3b3b637c37dd8334e66dcc3242e46fa223eae6ba1610ca1bd4d5ed6b23f6c4761d2494cc861d60802b7d26a64a07da34d72466fd2921c88658e70c19ee7cf3c20ad740234dc6802d9829a5b3cf63f4fcd83f813e2537aa7aa5d9096fcf52a0085d46130266f82fcd7f0af6ee30cb7b9bfd4491c3f589f3f167d93b55ecd0281f14cbfdebf5c79012548b87b34d5be50d8ade83f2b1be15f25f5fe3a6a2723fab1f7c726c1e84438903cfd4350060f7dd4d765c5e89f9f587f7fa40ded83023c67210e7752bf3c76b751af5b9c8805e632ffd585741d72741f09fb4abb5667e380a29794f64be3daf1a97093e596a6cdf44f27fe21aa463cda7fe8d42b81759fb859d540e6616ae80fd03341f64c8cb7ea49c48e07591897fdc5083daf1aa130e8b1818757c3be57cd7750df1a6a6c1607fef43167df03d7dc22b0bf2e81b5452b36e6b4ec54ab91bf0cb304e97273d75ddcbcfcee39a2c617591878696c78b3537743da5f47941783218d67642d7e7dcccd0c30e8446ceeaa4d26ed7419a64abbdf4025ffdfa34791e7345332752f0c2861d7f49646bb4bfca1eb7aca203086a0df79cd10b8be05bb005573a1ab4139aeeb78e60899d8ead01b44029535ba91552a677dad0af9eb1ade6e10b630d43b9cad4549ba78d9b084b32fac2b874456fae51fb9599484030efea3da60bdd9213af5072f0ba1c8363541af3d2b12b428c31bb0bec64f5dee26a9a5e737ebe81af732ee2f4baeb17a9de66820757400281aa5b53da0eca18ee1e83eac2cb486d92bdeb4d2edff3508bda8de07762e61c2c36bb35cbf41a7a99ff68e8250b0d1f17b59c87a2845d10f1be501dc59cd38468b14148079c66cf12cf31c3ca7af679bf102e2e53b6be85264e2f840a7d175e04f151ad492bf4c6ea67cb88a8df1bdf3bd024f12b71b6709d502a8d23b01b14fb99c630bd0ff4994cd97fd27700970fd0a99f35c218a5f68634b975168ccabc70d0f1b9f558b96b0db8089270f4cee79669e47a7d54d491069ad94cddeb9b2c6875c8b04a63379fef93d2e6481ead71c03e2244ad43af4a9f80c390e0284b88b19011bc91750da59723384ff433a90880029e0985e65a8dd6ecab6936a39274f3b06aa41ee872568cb4c4104a97b5b3328f02b295b1361c098dd33fa029397067bc372aa1dd0da26b22e3bc39e1cfb5612eb6ad506067d812987cbba03c550894a519aaedb932ee0df4e26f729e585238f4fa31bda925d6ab63531cb5648e0504d728a3aa9fac2b6c9b5c213aa13e77cdf434681b495962991563be60c4236e82aa3b73b6762ad261689079244aed90f2c7698514572c660eee6106694e9bcc4744d7352a3b5a1e389f0b3fb7fe7497895194004e4c17a40fd016dfd41b597aa59a6c346867994dbf79d01c6420dc5da285f50224b617f76a0e4b7f885b17178fc7cb034029240afaa4e7fdab943bd667791e72463f03bab74b7351a35fdcbe5b368a68ea35751c3bcddda6cc43f75c4fd804f64b9c838aa1cfaf96d8bedd1551947a984bedf176fbe3bb893b8dcb5d2fc83f37e4ce6071067616b66d65244be71c2a9302564f5a32bcf6e02a5ecdf48bc3980e65d8c0dcbc6476f9c6c290e9fc9448d44087b203f52f5e15d80dd220c2e01447739de02805ea7bd38410cd6abe793a006c25b3f361f1fd98c97dd34b242f21ddf813872c80b176661607df5642340f61218b264f3530a22b716fc84aec75633afbd8c0706c682305acdf5c7988eafeed2c3313020bdb68cfaeffea954aca8b87a62ee836adea06f3cc8f45d7f778b6b202194f64d0d9d0c2802f5af7b11efd9d2bf61fba3fb41a0e8a7650aca7693313daff9a0162bfedf446723773183fa107cdbec67ba7150aab9267606fd208885f69833c631e74a5e7a58630ad5383d917dbfb288107cf849ba177068ced3184d0ace27407943ec61afa166db45e8515b0796cd41636de162d93bcd3c1a4e667a6f6e83f5d818074c1818c75d378ff46ee857693bb91c85efe4f017e49dd0a0ac62471405b4ae996b5b543c62e8975268a60d3fdd68bdead9dd51e7677e03dda1f873af195117320e8f47e5a185b4c75cd0a4751d1b2885d679fff64cd1205190dca98042d1bb8895da6db471a6dcd530a3675a5ac277f99c983d26e7d3f764e420dd101499f4e533b4eba1038af610ddb093e7f4e5331d04a111bfba23c985427c8761458494ae3d20d0f0dd9fe4b69815ff29399e1798fc20f9feced0d8464197f570c85f587216edc6ec512e5c71abd05817aa67169f43e42cc9db0751e87293100062335ffcd303fed5d6e060bb3cb0fb09d2b431780796ad6d4b8ead8ee0fe5fe790fd41484e2718b191399b9ecb3437a72d12d31175d806e91c767e38782cc86fd9faf5d519a7c1a5e9e121c31ff8494f246c161a0041ae99fbd3ab40828d0a02e308372ced7ec9313024b784c3ff85807bdf9986cf7ab956846bc9420b644cc5b56f1009e2565621027ad365c8cabbac00a07879c0d7e74360593a7cdbf3ffa7907ae15085337671d82ac6144465594fd820b05a479332e00627caed23f563f7db48ef55d51a9d956d817afd34ff088f680b07c4090a1598886c4fd2885c46304af654a493eb1fa3537b7991c1a38579daa600c7afdfe1246cc9bac791cc644f65b70523c745dadb45edf72aba32f50ba35d7400e47a69099f4d7391f9eca99b20fdb210bd6eba249fcf88be0bbbebc7a1014eeb01749d1eaeb2c220946368fed8155c328bcd3b10be55b40fb637de507f55f23f9031182974bdf96ecded1f89c8685977c9a2a889dee4250748185b4c6650ea9a05284b064c7e8a32f431827b5993e7e69ee742178d145f382b62cd877ed2f500eed36e3bbfd21b7fc710dfc061af3ae3d41414492bf7aba223e933dd104e65bb2dd71bdef0dc07670db71572a0f053bfea8e79d465bbee27bec86b801203cdc6ced410e9678ed20bdade7f4b6024939c9f76bf873e65417f76f0b6a1f2c1eff13dd11107764bdf5db19eb39a12ce8b347c9a80e5ae62d9977825b4593498d509c4d90594ff0e7239a742943b90380cb220b46a47a984030ba6f816e3393796af30b76d88f57715ca55012bb326f97465d8c860ef4d0b236df1ec7b1266efb59f16b8961618103e26a3c7374083df51c5428e06ee09d479351fc9f7f23df9e0600d770ff3178c720506a700eb4aa79838c11edadd3fe71c55672cd8b08d2da55cbea5d05e8d0b4dd864f3d2a78174a70fa8af79581ce1963a78105f042d77ca3b2582ae101dd7382e302eeb16e6487b52", 0x1000}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:23 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x6}, 0x0) 10:26:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:23 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x6, &(0x7f0000000040)=[{0x1f, 0x2, 0x81, 0x6}, {0x9, 0x6, 0x4, 0x9}, {0x8, 0x0, 0x0, 0x7}, {0x3, 0x7, 0x5, 0x9c9a}, {0x6, 0x8, 0x7, 0x2}, {0x5, 0x8, 0x3, 0x2}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x134) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:24 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:24 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x1fe6, &(0x7f0000000040)={0x0, 0x8d8, 0x2, 0x0, 0x290}, &(0x7f000087f000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x0, 0x0, r1, &(0x7f0000000140)={0x80000000}, r1, 0x3, 0x0, 0x1}, 0x9) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000004, 0x8010, r1, 0x0) 10:26:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x8}, 0x0) 10:26:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:24 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48102, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) 10:26:24 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/if_inet6\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_triestat\x00') ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth0_vlan\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:24 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x9}, 0x0) 10:26:24 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_setup(0x2, &(0x7f0000000100)=0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000340)={0x78}, 0x78) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6800) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r3, 0x401) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r4, 0x0) preadv(r4, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat$incfs(r1, &(0x7f0000000300)='.pending_reads\x00', 0x140, 0x104) io_submit(r2, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0xa054, r1, &(0x7f0000000040)="a93bc004a7db5791a31aec5f4ce9b72b57f55659c71eb9e124a1b14b52d2a82bc04f141be444027f99e92c6195b028bac1ed5e78bec48fa7223229023712914c9e2df6a26a81f517ca457759b71ee9411aa7d4561b4063813b584e4f8a19874d193d9e2dfe", 0x65, 0x96, 0x0, 0x2, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000100)="d674761e9181dac368374a550e57b732fbfed201bedab3702e0cb7351f4f63293c317b8ef2d0d8bc321e76dc18203d04075f58ee517b1b41a6d027b45f3122126bb26de5024f8ceda948859fce", 0x4d, 0x2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000200)="2f1081033a24c87e451ca6a911ef8dd1fc00b89d82639ecf299ea9346e8f8708ca3469ca4eec73180acbb370df97afc2c23ec5d05e647f2801acc5f22d1f9dcace9eb31c682baa9ffc870f0cdc27b2e841d7e23c0abeb62a4ffe0db169d3078c0445bb4feeb1b5f6b02ab21e7d374d82aa2682a100fc41c544a90efac6461947a779e168f7240169569a5bfaee8584db83490a7a2794", 0x96, 0xb372, 0x0, 0x2, r4}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000340)="8310584deb08a2f5562f2f194b7efeda165eaf6fc965c8d09b872c0bd1922d2e07475527a1e4b2d74b3c8b4064368d14721d909b06ef5001b8d2613e96ca2f54be9a38b5cc972a1144dd60a4c61f71300b56d81922d9dd029d95526c4b884b3d5734a4c82c7df982e5920b02a4fdac4e36226383b0c758921ed5065c4ee64dcd12a67d035006023541932b931b4338fac68d33de760dc24edfe88ab4a7d96ae7572b8156732ab245c39382dfcf47a5838ba581ab5d58941f9b1360bc1a31b4b8fd3b91aef8a318128860d8d541e36bab1f2c76113fc01cc725f34cc2653874ca506312ffec14a4cbaca8", 0xea, 0x9, 0x0, 0x0, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0xfff, r1, &(0x7f0000000480)="4bdd420dab61e18200f62eb35ef83dec32748522962d52daa71a4891e3da5c093e05cad780920ab97c4de268d2a43d10c94142f88d6082625b940c21ae76ab3bc8c0b0d0fb0029", 0x47, 0x80000000, 0x0, 0x1}]) 10:26:24 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:25 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) fsetxattr$security_ima(r3, &(0x7f0000000480), &(0x7f00000004c0)=@v1={0x2, "5f455bec9105d042"}, 0x9, 0x2) write(r1, &(0x7f0000000240)="2400007c1e8e1b22ca7f19fb00200099f0e2ccba7521748cd4e55b3ebec59f9b2f929f4bdbefaf6f79a074d755ea8593ea7649e33bedd46414abaa00ebaaf3412a3f880c6b38ac9e5087a03a553b509126d86a9f77eca5959b631b6c620d4e8994b46ff89e34e291a17b8976e9c010cea0f168becb4884c8314e39f6c648afe2c2904b6f2d208ad7224de7fc0becc123196748e4284777c4f9ff08a49e55633c3ce7e24181d69b9cbfca97dfbadada48146332ac26606f21aafd3c020000b932cb680ab98364fa62e2f478a8d3f4a4b330c5f22538ef11d3ca36558c94da28050c01136bd0c9f30200b7463fc2113ff53b17531b4b53a01f07e37547af11f400000000", 0x6) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f00000006c0)) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.freeze\x00', 0x0, 0x0) r6 = openat2(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x600002, 0x80, 0x1}, 0x18) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000400)={0x3000, &(0x7f0000000140), 0x8, r6, 0x8}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000000)=0x80000002) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x200202, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) 10:26:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xa}, 0x0) 10:26:25 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000131000/0x1000)=nil, 0x1000, 0x8, 0x4000010, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x80) 10:26:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xc}, 0x0) 10:26:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:25 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00002d3000/0x2000)=nil, 0x2000, 0x0, 0x100010, 0xffffffffffffffff, 0x8000000) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3f, 0x480) io_uring_enter(r1, 0x13ba, 0xea19, 0x2, &(0x7f0000000080)={[0x71c]}, 0x8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000140)=r2, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x50) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r3, 0x0) sendto$inet(r1, &(0x7f0000000200)="a0be28810b9754cb98ed99a494821ba097a4edb8d572ec03dbef2d15d1676a27b1651ac21c50976a53a3bce4aa5c4dc686d4adda12fdff1c37cb84b1565d3440c106b31e1615ad01a6af01e087ab748c941c9df049b3b998c64bf3ffc672da1f0384f157f9a5e4880c39ca61d3d6de42", 0x70, 0x883, 0x0, 0x0) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r0, r5, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, r1, &(0x7f00000000c0)={0x4102, 0x1cd, 0xc}, &(0x7f0000000100)='./file0\x00', 0x18, 0x0, 0x12345}, 0x8001) 10:26:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000002", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:25 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:25 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x8, &(0x7f0000000040)=[{0x1, 0xfa, 0x4, 0xff}, {0x200, 0xff, 0xa1, 0xfffffffd}, {0x5, 0xfd, 0x2, 0x401}, {0x6, 0xdd, 0x99, 0xffffffff}, {0x4, 0x5, 0x71}, {0x2, 0x1, 0x5, 0x59}, {0xffff, 0x1, 0xf2, 0xfffffb14}, {0x5, 0x8, 0x5, 0xfba92b54}]}) 10:26:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xe}, 0x0) [ 708.203092][ T3626] __nla_validate_parse: 40 callbacks suppressed [ 708.203113][ T3626] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:25 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) syz_io_uring_setup(0x47a6, &(0x7f00000000c0)={0x0, 0x8a81, 0x4, 0x0, 0xc1}, &(0x7f0000202000/0x4000)=nil, &(0x7f0000839000/0x3000)=nil, &(0x7f0000000140), &(0x7f0000000240)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x40010, r3, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000000, 0x50, r0, 0xc716f000) 10:26:25 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 708.293730][ T3629] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.330509][ T3636] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:26 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 708.380301][ T3640] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000003", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:26 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x400480, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000140)=0x8, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000400)={0x0, 0x40b1}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYBLOB="854a3a925393"], 0x16) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0xfd, 0xff, 0xe0, 0x9, 0x0, 0x3, 0x4002, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f0000000480), 0x4}, 0x0, 0x7, 0x5, 0x7, 0x40, 0x1, 0x2, 0x0, 0x0, 0x0, 0x8}, r3, 0xc, 0xffffffffffffffff, 0x1) preadv(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)=""/92, 0x5c}, {&(0x7f0000000280)=""/244, 0xf4}, {&(0x7f0000000380)=""/39, 0x27}], 0x4, 0xb, 0x5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)="f92fc582b7acb83ac3c76c5dfaf6f008d0df96051b8da125e929ac33889540ba6919479c34c265f3f77ad0281639573bc4751d84a43edb5ccff56b2ccf515de64990e2b004d842844834de86cf153498d4c58e09e66bb91ad15630aeeb5c175c3596f2fd4b30fceff3f0cfc2fccc80e0") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000040)=0xfffffffd) ioctl$TUNSETCARRIER(r4, 0x400454e2, &(0x7f0000000000)) 10:26:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf}, 0x0) 10:26:26 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 708.630100][ T3657] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 708.701871][ T3667] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000004", @ANYRES32=r2], 0x1ec}}, 0x0) [ 708.772109][ T3670] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:26 executing program 2: write(0xffffffffffffffff, &(0x7f0000000100)="2cfc41a50000000000000002000308d02bc0899ffa733969c5772000", 0x1c) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:26 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000003", @ANYRES32=r2], 0x1ec}}, 0x0) [ 708.826791][ T3674] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 708.908765][ T3677] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:26 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x10}, 0x0) [ 708.950022][ T3680] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:26 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x3af2, &(0x7f0000000240)={0x0, 0x1df3, 0x2, 0x1, 0x31}, &(0x7f0000edb000/0x3000)=nil, &(0x7f0000cc4000/0x1000)=nil, &(0x7f0000000040), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r3, r2, &(0x7f0000000b00)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r4}}, 0x7) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}, 0x2) syz_io_uring_setup(0x3aa5, &(0x7f00000001c0)={0x0, 0xb814, 0x10, 0x0, 0x1f1}, &(0x7f0000ff1000/0xc000)=nil, &(0x7f0000bb2000/0x1000)=nil, &(0x7f0000000080), &(0x7f0000000100)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x2) 10:26:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000006", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:26 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:26 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x60}, 0x0) 10:26:26 executing program 2: munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = shmget$private(0x0, 0x4000, 0x400, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000c00000/0x400000)=nil, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'macsec0\x00'}) r2 = shmget$private(0x0, 0x2000, 0x54001800, &(0x7f000005f000/0x2000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffdfff) shmat(r2, &(0x7f0000ffb000/0x3000)=nil, 0x4000) shmat(r2, &(0x7f0000e6e000/0x3000)=nil, 0x4000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r3, 0x401) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ip6erspan0\x00'}) kcmp(0x0, 0xffffffffffffffff, 0x4, r3, r1) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000140)={0x3, 0x2, 0x5}) 10:26:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000007", @ANYRES32=r2], 0x1ec}}, 0x0) [ 709.279390][ T26] kauditd_printk_skb: 226 callbacks suppressed [ 709.279410][ T26] audit: type=1800 audit(1634811986.983:256): pid=3702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=12 res=0 errno=0 10:26:27 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00'}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'veth0\x00', @local}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r0, r1, &(0x7f0000000600)=0x1, 0x80000001) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:27 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 709.395287][ T26] audit: type=1800 audit(1634811987.003:257): pid=3702 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="SYSV00000000" dev="hugetlbfs" ino=14 res=0 errno=0 10:26:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf0}, 0x0) 10:26:27 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x5, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) fstat(r1, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x8010, r0, 0x57231000) 10:26:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000008", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:27 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f00000000c0), 0x9, 0x40) write(r0, &(0x7f00000001c0)="24000003000000000000000000657959a469d103e4081abd96e3116284848b6cf125bde4fdfcbd312b4aa748ff31f5063a78689fc5fe5a37ce7f97e8b292170ad0096c00545e34e6c72d20c913131071b8bf9e47a8bbd8b9ab678cee9a3f75959e9685ff39736c5c23c45c331d3c94007ea036ad04e74f2d1a7041c5998fe57a579d443d14ff3507f782d1f079234be45c0e764b", 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'veth1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, 0x1, 0x3, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFQA_VLAN={0x54, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x9}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x81}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1f}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff8}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_TCI={0x6}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x97ca8c48f6a761e7) lseek(r4, 0x10000, 0xa22f60f21b6ad001) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x196}, 0x0) 10:26:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r3, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x8, 0x0, [{0xe8, 0x3, 0x0, 0x0, @irqchip={0x4, 0x4}}, {0x9, 0x3, 0x0, 0x0, @msi={0x9, 0x1, 0x9, 0x1}}, {0x80000001, 0x1, 0x0, 0x0, @sint={0x3, 0x3}}, {0x4, 0x4, 0x0, 0x0, @adapter={0x0, 0x6, 0x100000001, 0x0, 0x6}}, {0x6, 0x3, 0x0, 0x0, @msi={0x9, 0x7, 0x0, 0x4}}, {0x401, 0x1, 0x0, 0x0, @sint={0x8, 0x10000}}, {0x1f, 0x2, 0x0, 0x0, @msi={0x2, 0x6, 0x6000000, 0x230c}}, {0xfffffffc, 0x4, 0x0, 0x0, @irqchip={0x72c, 0x7f}}]}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000140)) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0x399, &(0x7f0000000040)={0x0, 0xcd1, 0x2, 0x1, 0xa62, 0x0, r4}, &(0x7f000064b000/0x2000)=nil, &(0x7f0000884000/0xf000)=nil, &(0x7f0000000240), &(0x7f0000000100)) 10:26:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000009", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:27 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x0, 0x2, 0x80, 0x0, 0x6, 0x404, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x1000, 0x50, 0x1ff, 0x9, 0x7, 0x0, 0x6f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:27 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x300}, 0x0) 10:26:27 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000a", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:28 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x600}, 0x0) 10:26:28 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) 10:26:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000c", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:28 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:28 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:28 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101083, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'sit0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000001c0)) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x45f72022aca2b091) fcntl$setflags(r2, 0x2, 0x0) 10:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x900}, 0x0) 10:26:28 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001a40)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="02f7ac2b532320b3d226653fdba42b1e68adac1cc408ce47535e78da3ca8f4dccd6cdc1f1e305e6e37100f14432ec9417b666a8299022cbc8475be", 0x3b}, {&(0x7f0000000080)="301015ac98fa9995d832fb762091f001463b1ea6e0f97d3efab3daecf76c5f5167ae12a1413f63ee597b60b3a40550408aa09a2075ee99c53dad831c640ccef3de41c444f5692142145eb759beaef7fde48ab4d8b536f8dc6e48e21335a724909054b8d4db7f41b6495cfdf3fd90032c5f2326596cca9cbab79e09c5a3fdce5009610479e272042e18cb1ca22eea56c062534c17bd51e0af63d20ea3999481f03e76381433a6ee12aa7df6e950b718f9a372f956a7be3a0cb5cf5e08bfe422d614a379ac7b1e0d10bbb5deb1bc9b8d50858b5b409113963a54d639609a8407793a27f8ed19f8111a94766475708f0482", 0xf0}, {&(0x7f0000000180)="d2424873ee6deeee5162cecd3dcc986e6dd130dd4f1bb3b5dd7d31e8649f94e29e2dff662e2b9001b5207de8ced0540ba0b18ab5e4216d2c3fad70bd2f0426576fdc73b07af3994c264a25823bc25934779519442c9ade82e3841a0281efc84d68f695c44dc0edfee133e79c0285d4d814b1ba27b1cdd3a9321852aa23992e6ee90e748bff022260c0ec101cbb1ec9beb20fb1b57862ea882a27dfe6e3e7696afab1e0a074291d3829a43dc0707b6cc8", 0xb0}, {&(0x7f0000000240)="fef7a33fb2d23f12faf9fc86ad1134dc68e725960269116a86cee9e5f74a09fcdf572faea167912f8281a0a157038b7982190affdba54807df5ccf7ef677f077ff34ac7daf9a3546135cbccb3a176e7f493c9b9bd699f961bd5993729162f68f9f0c7e8bc394da5028ae63a10f7c55e5bc5a785179d04c3d8d909fa18b8fc9812386e1fdb767f4fb2114ec3902b7bd7693842c74cba519ea18b20cd292348efaa40ee82ba95c3b8e534b7c3ebf9efa2e1c70e81e54414b3d0a32920474e6628f2a9c7fbc641f72", 0xc7}, {&(0x7f0000000340)="3da47bb80d2ef92164a7bfa09f78a312d1abcfaf297162e47b62d604c63d50a65cb9e934a1a976f225e607ec36f6d3c524abad6064d323b4d2e076f7d89c3aa5fa30447e4835a36d3f8552e77a64a28a4db55a88907692b243238afff91597e5f20f3f6315a6b696f6387445645f808ce3a51b3a758fa89be427a109909ec742af1b96b4c9d1276207ba21492fb63752d2f5e06ebd5d92f4ba91842651125b60cb8cc93821309b54dcdd938379fc263d51dc4d8b9a62f577105603356cda8e131cfae11da260bc775d1b5e52ecfc745b3be5271bafcf9028fa91ea3b341e6d9cc8bd", 0xe2}], 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x1518}, 0x0, 0x80, 0x1}, 0xffffffff) pipe2(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) syz_io_uring_setup(0x3e8, &(0x7f0000001ac0)={0x0, 0x6353, 0x2, 0x3, 0x1c8, 0x0, r0}, &(0x7f00002cb000/0x2000)=nil, &(0x7f00006eb000/0x4000)=nil, &(0x7f0000001b40), &(0x7f0000001b80)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r6, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) syz_io_uring_setup(0x884, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x552, &(0x7f0000000180), &(0x7f0000ee8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r8, r7, &(0x7f0000000b00)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat2(r2, &(0x7f0000001c00)='./file0\x00', &(0x7f0000001c40)={0x11d183, 0x8, 0x19}, 0x18) syz_io_uring_submit(r8, 0x0, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0x8, 0x2, 0x0, 0x1, 0x19, 0x1, {0x2, r9}}, 0x7) syz_io_uring_submit(r3, 0x0, &(0x7f0000001bc0)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2007, @fd=r6, 0x7ff, 0x800, 0xfffffff9, 0x11, 0x1, {0x3, r9}}, 0x8000) dup3(r6, 0xffffffffffffffff, 0x2d2f0dd9fb9f655) 10:26:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000e", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:28 executing program 4: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3f000000, 0x12, r0, 0x0) 10:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xa00}, 0x0) 10:26:28 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:28 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'vcan0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'veth0_to_bond\x00', @random}) 10:26:28 executing program 0: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x145000, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000008, 0x50, r0, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x49) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x88) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r3, 0x401) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f00000000c0)=r3, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000000f", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:28 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:28 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xc00}, 0x0) 10:26:28 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) syz_io_uring_setup(0xf74, &(0x7f0000000040)={0x0, 0x813a, 0x8, 0x1, 0x394, 0x0, r0}, &(0x7f0000615000/0x2000)=nil, &(0x7f0000e59000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x8010, r0, 0xbcaaa000) 10:26:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000010", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xe00}, 0x0) 10:26:29 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) (fail_nth: 1) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:29 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(0xffffffffffffffff, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003400)=[{{&(0x7f00000027c0)=@abs, 0x6e, &(0x7f0000002940)=[{&(0x7f0000002840)=""/83, 0x53}, {&(0x7f00000028c0)=""/70, 0x46}], 0x2, &(0x7f0000002980)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x148}}, {{&(0x7f0000002b00), 0x6e, &(0x7f0000003180)=[{&(0x7f0000002b80)=""/250, 0xfa}, {&(0x7f0000002c80)=""/192, 0xc0}, {&(0x7f0000002d40)=""/217, 0xd9}, {&(0x7f0000002e40)=""/57, 0x39}, {&(0x7f0000002e80)=""/231, 0xe7}, {&(0x7f0000002f80)=""/233, 0xe9}, {&(0x7f0000003080)=""/228, 0xe4}], 0x7, &(0x7f0000003200)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003240)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f00000032c0)=""/121, 0x79}], 0x1, &(0x7f0000003380)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x70}}], 0x3, 0x1, &(0x7f00000034c0)={0x77359400}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006bc0)=[{{&(0x7f0000003500), 0x6e, &(0x7f0000004880)=[{&(0x7f0000003580)=""/71, 0x47}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/231, 0xe7}, {&(0x7f0000004700)=""/227, 0xe7}, {&(0x7f0000004800)=""/108, 0x6c}], 0x5}}, {{&(0x7f0000004900), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004980)=""/124, 0xfffffffffffffe7c}, {&(0x7f0000004a00)=""/112, 0x70}, {&(0x7f0000004a80)=""/198, 0xc6}, {&(0x7f00000009c0)=""/125, 0x7d}, {&(0x7f0000004c00)=""/171, 0xab}, {&(0x7f0000004cc0)=""/196, 0xc7}, {&(0x7f0000004dc0)=""/50, 0x32}, {&(0x7f0000004e00)=""/63, 0x3f}, {&(0x7f0000004e40)=""/156, 0x9c}], 0x9, &(0x7f0000004fc0)}}, {{&(0x7f0000005000)=@abs, 0x6e, &(0x7f0000006640)=[{&(0x7f0000005080)=""/137, 0x89}, {&(0x7f0000005140)=""/104, 0x68}, {&(0x7f00000051c0)=""/195, 0xc3}, {&(0x7f00000052c0)=""/120, 0x78}, {&(0x7f0000000a40)=""/134, 0x85}, {&(0x7f0000005400)=""/135, 0x87}, {&(0x7f00000054c0)=""/39, 0x27}, {&(0x7f0000005500)=""/209, 0xd1}, {&(0x7f0000005600)=""/63, 0x3f}, {&(0x7f0000005640)=""/4096, 0x1000}], 0xa, &(0x7f0000006700)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x10}}, @rights={{0x2c}}], 0xc8}}, {{&(0x7f0000006800)=@abs, 0x6e, &(0x7f0000006a80)=[{&(0x7f0000006880)=""/96, 0x60}, {&(0x7f0000006900)=""/131, 0x83}, {&(0x7f00000069c0)=""/158, 0x9e}], 0x3, &(0x7f0000006ac0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}], 0x4, 0x1, &(0x7f0000006cc0)={0x0, 0x989680}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(0xffffffffffffffff, r5, 0x0) r6 = getegid() setresgid(r6, 0x0, 0x0) getgroups(0x8, &(0x7f0000000380)=[r6, 0x0, r6, r6, r6, r6, 0xee01, r6]) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000003c0)=@nat={'nat\x00', 0x19, 0x3, 0x492, [0x20000500, 0x0, 0x0, 0x200006a6, 0x2000099a], 0x0, &(0x7f0000000340), &(0x7f0000000500)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x5, 0x14, 0x88f5, 'veth0_virt_wifi\x00', 'geneve0\x00', 'ip_vti0\x00', 'veth1_macvtap\x00', @link_local, [0x0, 0xff, 0xff, 0xff], @link_local, [], 0xb6, 0xee, 0x13e, [@ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0xffffff00, 0xff000000, 0x51, 0x33, 0x31, 0x20, 0x4e22, 0x4e20, 0x4e23, 0x4e24}}}], [@arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x6, {0x8}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x2, [{0x5, 0x31, 0x88e5, 'tunl0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'veth1_to_batadv\x00', @random="3d760a7edc03", [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff], 0xae, 0x11e, 0x156, [@owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0xffffffffffffffff, r7, r6, 0x0, 0x1}}}], [@common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}, {0x5, 0x0, 0x890d, 'ip_vti0\x00', 'syz_tun\x00', 'batadv0\x00', 'macvlan0\x00', @broadcast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0xe6, 0x11e, 0x16e, [@vlan={{'vlan\x00', 0x0, 0x8}, {{0x3, 0x4, 0x6005, 0x0, 0x6}}}, @ip={{'ip\x00', 0x0, 0x20}, {{@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0xffffffff, 0xff, 0xfa, 0x1, 0x7, 0x20, 0x4e21, 0x4e23, 0x4e23, 0x4e24}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xfffffffffffffffe}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xfffffffc, 'syz0\x00', {0x2}}}}}]}, {0x0, '\x00', 0x3}]}, 0x50a) stat(&(0x7f0000006d00)='.\x00', &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000006ec0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000180)="0d9573015ad813028df99eb647d72a50115bc1eddd2b44abf38b868412c77099abdb8f75f84a02f9cf39d5195f4b07eb2f6346113396314fc9d418e26e2d51cec375ada8d0030cbfbaef3b508ad8bfcdb5e559d92e86a6028bae5fa207876ac80c4674a69a703c4be6ca6f9a9f04e3cfdbb836b0fa98f3444f46655312f359ad458e57296b98554ed13976cea9fbb50565bcef44048598923d8fc66ff6d6d754d91fde8005bb32cc45b76df2f554b7fa61147b145d4018236eda21b9408ddebdc6f2fd34c024e772ad75", 0xca}, {&(0x7f0000000040)="64c3623780e420d62f0c75546c18f57d1f14021a2a4a6a434bffb2ada53607d405a4f17a46e9392ffd44eede524c73661a6dd6173074687057b41894f6d805", 0x3f}, {&(0x7f0000000280)="fb7aded912d4026c3b35341368124c4044f0203a1f95f9df4e134f29bc0eb4f15507db0c5bd69073f9647119d0e3c6177f385367d43f6ab6d7c311257f6a0cd54e1f2ebaf1fd404bd5a148c3695b47a4876222ce4c23b2e3393bcbebbebeaeca0dbc4cb7e9b646865f42636086346c96c2e8d8d3d8b85823ebc094b35425dc79305f109a1e156246984c900c216eb0da230f3afedfa88f5dd45ac02b0eed3637a601071deb109378efc1dbc639a7d26c96a52a740d90974dc9d84e97a00d87a0241916003957c860356bf7570ba7c46bc40832e45887d13a255112", 0xdb}, {&(0x7f0000000380)="7a45e4fa71b24673dd1162fc365991ea3b26eccb2ca875bfa8dbb3cf5693373969cb85475e179af0a3ee0b095dbe514d28cd0ea86f18ac879aeeac8f51042f0a746aee96efafe4620c", 0x49}, {&(0x7f0000000400)="906b4bd83adf1cc78654c16c634e61c309c60b77a778c1fbcd10fde5af0a9b", 0x1f}, {&(0x7f0000000440)="253f9ed6e3e4932f15ca1043d8ce40fe0b418597b5e2240fab78675dd7c5c250fe852f4875e84cc2af34b9405599177dc0d13c58c6262fe9076ee9a7ecbfd877228177aa3ca60cb96b212122018787e096fa2e7d900969132d654e91e882ba63329658fe43ed75adb85c4cdf5eba3075653d8aa2474edbda6fa583db9d103da1a9936634e5b271406bd1ad17316ee1c600065dcad180f877e9dd1f6477b41882534621cf1f04d9f1b701a5aa571a6a284fe5a1358701464005b5d8cc498ef010d4c4172792784493d8bfd8169c8108c6fdb6118b058f8c8feedc94104318a7", 0xdf}, {&(0x7f0000000540)="1e768518e05af33061be6870559740507c2b5963b0c083bfb0512db3107c2d25e47e90f16f36815499c89e919031ec6e1b9951c1bda50417364b790de2a8115881ca88d51d43a5a558b57126ee7e", 0x4e}, {&(0x7f00000005c0)="854f50f4a89940a8b2a4c6b2e76087e8bc90198d03297125c06bfde558e22e57c6ca6a61feb6ac6cf6c4494bf13cdd9eb5e0b2d7b636df4987cdb46e7921e16065bb90a45f64ffe2ac21c21bb6aad2d44d8b1f22b392c8c86f9b32c491c6860d9793f64c8f56ce184563c27b0235b1e180da0b7fd71f78", 0x77}], 0x8, &(0x7f0000006dc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r0, r1}}}, @cred={{0x1c, 0x1, 0x2, {r2, r3}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r8}}}], 0xe0, 0x48004}, 0x4800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000000)) 10:26:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000060", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:29 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x20010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x9) syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) syz_io_uring_setup(0x43de, &(0x7f0000000280)={0x0, 0x735, 0x8, 0x0, 0x3c9}, &(0x7f000055f000/0x3000)=nil, &(0x7f00004b7000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000300)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000340), 0x1000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000a, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x18b, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0xc9}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000140)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/vicodec', 0x400000, 0x102) fsconfig$FSCONFIG_SET_PATH(r8, 0x3, &(0x7f0000000080)='-[\x00', &(0x7f00000000c0)='./file0\x00', r7) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) 10:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf00}, 0x0) 10:26:29 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'bridge0\x00', {0x2, 0x0, @empty}}) 10:26:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 711.541863][ T3857] FAULT_INJECTION: forcing a failure. [ 711.541863][ T3857] name failslab, interval 1, probability 0, space 0, times 0 [ 711.580920][ T3857] CPU: 1 PID: 3857 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 711.589734][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.599811][ T3857] Call Trace: [ 711.603123][ T3857] dump_stack_lvl+0xcd/0x134 [ 711.607756][ T3857] should_fail.cold+0x5/0xa [ 711.612290][ T3857] ? snd_pcm_oss_change_params_locked+0x1a0/0x3990 [ 711.618889][ T3857] should_failslab+0x5/0x10 [ 711.623411][ T3857] kmem_cache_alloc_trace+0x55/0x3c0 [ 711.628735][ T3857] snd_pcm_oss_change_params_locked+0x1a0/0x3990 [ 711.635115][ T3857] ? snd_pcm_plugin_append+0x190/0x190 10:26:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) [ 711.640599][ T3857] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 711.646862][ T3857] ? __fsnotify_parent+0x488/0x9d0 [ 711.652061][ T3857] ? snd_pcm_oss_read+0x386/0x7b0 [ 711.657115][ T3857] ? mutex_lock_io_nested+0x1150/0x1150 [ 711.662691][ T3857] ? __fget_files+0x21b/0x3e0 [ 711.667398][ T3857] ? lock_downgrade+0x6e0/0x6e0 [ 711.672275][ T3857] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 711.677679][ T3857] snd_pcm_oss_make_ready_locked+0xb3/0x130 [ 711.683602][ T3857] snd_pcm_oss_read+0x3a8/0x7b0 [ 711.688485][ T3857] ? security_file_permission+0xab/0xd0 [ 711.694063][ T3857] ? snd_pcm_oss_read2+0x3f0/0x3f0 [ 711.699200][ T3857] vfs_read+0x1b5/0x600 [ 711.703384][ T3857] ksys_read+0x12d/0x250 [ 711.707647][ T3857] ? vfs_write+0xae0/0xae0 [ 711.712088][ T3857] ? syscall_enter_from_user_mode+0x21/0x70 [ 711.718009][ T3857] do_syscall_64+0x35/0xb0 [ 711.722529][ T3857] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 711.728460][ T3857] RIP: 0033:0x7fd1ae897a39 [ 711.732893][ T3857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 711.752524][ T3857] RSP: 002b:00007fd1abdec188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 711.760965][ T3857] RAX: ffffffffffffffda RBX: 00007fd1ae99b020 RCX: 00007fd1ae897a39 [ 711.768957][ T3857] RDX: 0000000000000072 RSI: 0000000020000740 RDI: 0000000000000004 [ 711.776949][ T3857] RBP: 00007fd1abdec1d0 R08: 0000000000000000 R09: 0000000000000000 [ 711.784939][ T3857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 10:26:29 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) [ 711.792929][ T3857] R13: 00007fd1aeeceb2f R14: 00007fd1abdec300 R15: 0000000000022000 10:26:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x5865}, 0x0) 10:26:29 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) (fail_nth: 2) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ad", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:29 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write(r0, &(0x7f0000000100)="24000400000099f0003be90000ed250e02", 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:29 executing program 0: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x741200, 0x5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x4, 0x800, 0x3, 0x0, 0x8, 0x6, 0x1}, 0x9c) mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f00004b7000/0x1000)=nil, 0x1000, 0xb, 0x10010, r1, 0x483de000) 10:26:29 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x6000}, 0x0) 10:26:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 712.257777][ T3891] FAULT_INJECTION: forcing a failure. [ 712.257777][ T3891] name failslab, interval 1, probability 0, space 0, times 0 [ 712.343094][ T3891] CPU: 1 PID: 3891 Comm: syz-executor.4 Not tainted 5.15.0-rc6-syzkaller #0 [ 712.351825][ T3891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 712.361909][ T3891] Call Trace: [ 712.365214][ T3891] dump_stack_lvl+0xcd/0x134 [ 712.369845][ T3891] should_fail.cold+0x5/0xa [ 712.374394][ T3891] ? snd_pcm_oss_change_params_locked+0x1d6/0x3990 [ 712.380927][ T3891] should_failslab+0x5/0x10 [ 712.385462][ T3891] kmem_cache_alloc_trace+0x55/0x3c0 [ 712.390789][ T3891] snd_pcm_oss_change_params_locked+0x1d6/0x3990 [ 712.397165][ T3891] ? snd_pcm_plugin_append+0x190/0x190 [ 712.402660][ T3891] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 712.408941][ T3891] ? __fsnotify_parent+0x488/0x9d0 [ 712.414172][ T3891] ? snd_pcm_oss_read+0x386/0x7b0 [ 712.419235][ T3891] ? mutex_lock_io_nested+0x1150/0x1150 [ 712.424823][ T3891] ? __fget_files+0x21b/0x3e0 [ 712.429532][ T3891] ? lock_downgrade+0x6e0/0x6e0 [ 712.434415][ T3891] ? __lockdep_reset_lock+0x1a0/0x1a0 [ 712.439828][ T3891] snd_pcm_oss_make_ready_locked+0xb3/0x130 [ 712.445760][ T3891] snd_pcm_oss_read+0x3a8/0x7b0 [ 712.450642][ T3891] ? security_file_permission+0xab/0xd0 [ 712.456229][ T3891] ? snd_pcm_oss_read2+0x3f0/0x3f0 [ 712.461373][ T3891] vfs_read+0x1b5/0x600 [ 712.465570][ T3891] ksys_read+0x12d/0x250 [ 712.469843][ T3891] ? vfs_write+0xae0/0xae0 [ 712.474302][ T3891] ? syscall_enter_from_user_mode+0x21/0x70 [ 712.480240][ T3891] do_syscall_64+0x35/0xb0 [ 712.484683][ T3891] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 712.490601][ T3891] RIP: 0033:0x7fd1ae897a39 [ 712.495057][ T3891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 712.514707][ T3891] RSP: 002b:00007fd1abe0d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 712.523156][ T3891] RAX: ffffffffffffffda RBX: 00007fd1ae99af60 RCX: 00007fd1ae897a39 [ 712.531155][ T3891] RDX: 0000000000000072 RSI: 0000000020000740 RDI: 0000000000000004 10:26:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 712.539152][ T3891] RBP: 00007fd1abe0d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 712.547151][ T3891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 712.555145][ T3891] R13: 00007fd1aeeceb2f R14: 00007fd1abe0d300 R15: 0000000000022000 10:26:30 executing program 2: ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x6, 0x1, 0x4, 0x100, 0x5, {0x0, 0x0}, {0x4, 0x0, 0x0, 0x40, 0x1, 0x8a, "00eaff00"}, 0x55, 0x1, @offset=0x7f, 0x2, 0x0, 0xffffffffffffffff}) write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0xfffffffffffffea1) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082505a1b1b7dbdf02000109025c000201000800090400000102090000052406000105240000000d240f0100000000000000000006241a000000090581", @ANYRES64], 0x0) syz_usb_disconnect(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) r6 = syz_usb_connect(0x0, 0x34, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYRES16=r5, @ANYRESDEC=r0, @ANYRES32=r5, @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES64=r3, @ANYRES32=r4], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000ac0)={0x4}) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f00000006c0)) syz_usb_control_io(r6, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0x23, 0xa7, {0xa7, 0x21, "a7ca27c1cecdb845ff444e5044c8196aa903fc269f67eb759f05e17ef5f4f36de9af8d76f64fe8bb01c0c9c27aa65518d877d24f9d800ebbccc848f0b1931163b6cf9d5afac9f516f6e05de2ca1adb0e864a63d3fbc453602069059b9d991a5733ae6104659d564570bacde9457740a0e062f9560a3123c9d418b8eebd1793f0f90013581239d5626397a54d4fccccb688ac3dd142c26b6d273d877e3ecaf1ec3011347ef2"}}, &(0x7f0000000380)={0x0, 0x3, 0x98, @string={0x98, 0x3, "4768b981c54890090fc70de563e3e35ff16c27c72c56b27b4c8b90bc03bd5f8e47cb4a116d2c81f34dcbff8e88efe2ca7d2344750d03c3c2f15a8f092840520129fb1024d29426bf4ea5024ff7ac6742fc90b725d8adf9cea9b71a44619d67c41b92a6784f63e2ecd29306f01fc9487e489c5904dd1dde53bb8c11302bafbaebd276ef33508fe3175aa3840a833cface0bd234e278b0"}}, &(0x7f0000000040)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x1, 0x9, 0x2}]}}, &(0x7f0000000440)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x80, 0x20, 0x0, "d09666cb", "de58700a"}}, &(0x7f0000000480)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x81, 0xfe, 0x7, 0x1f, 0x401}}}, &(0x7f0000000a00)={0x84, &(0x7f0000000500)={0x40, 0x3, 0xf3, "36177de19a289f10f93dee1419b69b80bb19b1e05349d141f67d5fe2d43ea8f084a55945370ba6eb444163b21e1fa0e3267ef79dc285d1ae82d9b23faf43bd011ebac7cd0440f6497aaa212193bd9bf32f237722419d6277dc6992a4aaa73b8a35fda0e418713f31882ba176fbd11f478e072823d6a0e9cfcbab67cabc2672362b8ad4e5b001d162374cedaa25458e8bf63cf9756fa2ba531d79496095d784b6557c4f03ea0e4f7cf2580120c9e8b672e2e3bb310ccd12ded600f95be983f95f3dc4bd4630112c9bbfe5a44075986850ddd35f84905f294646d3e9b7d0435a52547af24ddee1738e6830bffd285e5ebf11d2dc"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0x60, 0x20, [0x0]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x5}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "378f"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000840)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000880)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "f8eb"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000009c0)={0x40, 0x21, 0x1, 0xff}}) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000000)) 10:26:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x6558}, 0x0) 10:26:30 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:30 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) syz_io_uring_setup(0x1b9b, &(0x7f0000000040)={0x0, 0x49c, 0x0, 0x0, 0x36e, 0x0, r0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fae000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000001500)=""/162, 0xa2}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/120, 0x78}, {&(0x7f0000001680)=""/197, 0xc5}, {&(0x7f0000001780)=""/90, 0x5a}], 0x5, 0x6, 0x7fff) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) pipe(&(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000001880)={0x2, "34d5822ff9df407cebf202f9abda0a02f6342a0777f2a3534307f17acc3e85532b8db09252f8cb628d9e8c07b56c72c77aed23c72f006d66e0e7fa769a718731"}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000001940)={0x0, r2}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x110, &(0x7f0000001900)=0x1000, 0x0, 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001140)=@abs, 0x6e, &(0x7f0000001200)=[{&(0x7f00000011c0)=""/57, 0x39}], 0x1, &(0x7f0000001980)=ANY=[@ANYBLOB="18000e5884c2000000000000000545f8", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000004000000000100000001000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x58}, 0x2000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001340), r3) sendmsg$DEVLINK_CMD_PORT_SPLIT(r5, &(0x7f00000014c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xf8, r6, 0x8, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4044044}, 0x4000040) fcntl$setlease(r3, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000891000/0x4000)=nil, 0x4000, 0x4, 0x110, r3, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r7, 0x0) 10:26:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x8100}, 0x0) [ 713.022329][ T8534] usb 3-1: new high-speed USB device number 31 using dummy_hcd 10:26:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x9601}, 0x0) 10:26:30 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 713.282212][ T8534] usb 3-1: Using ep0 maxpacket: 8 10:26:31 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x40102, 0x1c6) mmap(&(0x7f000077d000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) [ 713.351383][ T3947] __nla_validate_parse: 61 callbacks suppressed [ 713.351404][ T3947] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.414295][ T8534] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 713.424944][ T3950] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 713.448248][ T8534] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 713.465361][ T8534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 713.485623][ T8534] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2047, setting to 1024 [ 713.538200][ T3955] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 713.549746][ T3954] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 713.652429][ T8534] usb 3-1: New USB device found, idVendor=0525, idProduct=b1a1, bcdDevice=db.b7 [ 713.670590][ T8534] usb 3-1: New USB device strings: Mfr=223, Product=2, SerialNumber=0 [ 713.689252][ T8534] usb 3-1: Product: syz [ 713.699148][ T8534] usb 3-1: Manufacturer: syz [ 713.722664][ T3920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 713.743202][ T8534] hub 3-1:1.0: bad descriptor, ignoring hub [ 713.749151][ T8534] hub: probe of 3-1:1.0 failed with error -5 [ 713.766363][ T8534] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 713.779756][ T8534] cdc_wdm 3-1:1.0: Unknown control protocol [ 714.102205][ T20] usb 3-1: USB disconnect, device number 31 [ 714.491980][ T20] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 714.692208][ T20] usb 3-1: device descriptor read/64, error 18 [ 714.972077][ T20] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 715.172017][ T20] usb 3-1: device descriptor read/64, error 18 [ 715.292232][ T20] usb usb3-port1: attempt power cycle [ 715.702036][ T20] usb 3-1: new high-speed USB device number 34 using dummy_hcd 10:26:33 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 10:26:33 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x1ce) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:33 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:33 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0xf6d9f000) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r1, 0x401) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000f73000/0x2000)=nil, 0x2000, 0x2000000, 0x40010, r2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x900) preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f0000000200)=""/130, 0x82}, {&(0x7f0000000140)=""/53, 0x35}, {&(0x7f00000002c0)=""/183, 0xb7}], 0x5, 0x8, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f00003dd000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x0) 10:26:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf000}, 0x0) [ 715.812139][ T20] usb 3-1: device descriptor read/8, error -71 [ 715.894102][ T3993] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 715.920177][ T3992] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:33 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @multicast2=0xac14140a}}}}}}, 0x0) [ 715.950239][ T3997] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 715.973767][ T3999] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x34000}, 0x0) 10:26:33 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001e0000032cbd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="011002004000000008001e0001000000d6d203a49c14a47348eecd7cebeba30e679ba4430edd159f"], 0x28}}, 0x88005) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0) 10:26:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:33 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x1, 0x1000}, 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000200)=0x3, &(0x7f0000000240)=0x2) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000140)=""/116, 0x74, 0x1, 0x9}) [ 716.179217][ T4006] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:33 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb, @multicast2=0xac14140a}}}}}}, 0x0) [ 716.251565][ T4008] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:34 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x200007b2) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x400300}, 0x0) 10:26:34 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x18b, &(0x7f00000002c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f00006d3000/0x3000)=nil, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x6, 0xf52, 0xfffff801, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000240)={r5}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000040)='./file0\x00', 0x18}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000039000511d25a80648c63940d0124fc60100035400c0003000200000037153e370a00018004001d00d1bd", 0x2e}], 0x1}, 0x0) syz_io_uring_setup(0x7f57, &(0x7f0000000080)={0x0, 0xe60b, 0x0, 0x3, 0x4c, 0x0, r2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000a5d000/0x1000)=nil, &(0x7f0000000140), &(0x7f0000000180)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r9, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) preadv(r9, &(0x7f0000000280)=[{&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, 0x0, 0x80000001) syz_io_uring_submit(r0, r4, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:34 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 10:26:34 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1c, @multicast2=0xac14140a}}}}}}, 0x0) [ 716.572667][ T4027] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 10:26:34 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:34 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf0ffff}, 0x0) 10:26:34 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:34 executing program 0: mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x8000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0) 10:26:34 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) sendfile(r1, r0, 0x0, 0x1) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x5) write$tun(r4, &(0x7f0000000100)={@void, @void, @ipv4=@udp={{0x20, 0x4, 0x2, 0x26, 0x101, 0x65, 0x0, 0x4, 0x11, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x6a, 0x1, [{0x6, 0x10, "c4cb4cf9e29ba657cbb3cec4f209"}, {0x1, 0x3, "03"}, {0x7, 0x7, "7769241759"}, {0x5, 0xe, "420e08000000000000000000"}, {0x6, 0xc, "f3137ffc734c0cdc0626"}, {0x0, 0xb, "ec2d3a6ceeb38bf2d3"}, {0x2, 0xe, "ff12493f2ee9c0f628241601"}, {0x2, 0xa, "3f8e4350dec15ef9"}, {0x7, 0x3, "80"}, {0x7, 0xa, "a0d916eb240a957b"}]}, @end]}}, {0x4e22, 0x4e21, 0x81, 0x0, @gue={{0x1, 0x0, 0x1, 0xb0, 0x0, @void}, "64ec94a3ca8dc03feedc0614cd9b04a18a32483b0da7af7c2dcacde51d210a706d744d0f97185b07bafc099f81b00f420cb9638e0c21c9258a85fae556c965f0bc44f08b63fc3f9414cbefcb200020f2c2af0311cc3e5d8831605875b4b316a8dd7c993d27b2c45e3e757b942028aa59fd13b13e00"}}}}, 0x101) 10:26:35 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x247) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x9, 0x24000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)={0x10000, 0x1, 0x4, 0x100000, 0x7ff, {r3, r4/1000+10000}, {0x1, 0x0, 0x1c, 0x6, 0x5, 0x6, "a6ffdb96"}, 0x1000, 0x3, @offset=0x1, 0x1, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000840)={0x0, 0x1, 0x1, [0xaf0, 0x81, 0x6a, 0x5, 0xe1a9], [0xa2, 0x1, 0x5, 0x8, 0xe00000, 0x6, 0x2, 0x80, 0x6, 0x3, 0x40, 0x6, 0x6, 0x0, 0x200, 0x800, 0xffffffff, 0x5, 0x5, 0x80, 0x3, 0x4, 0x400, 0x8000, 0x5, 0x20, 0x2, 0x10001, 0x3, 0x2, 0x1ff, 0x7ff, 0x6, 0xe04c66d, 0x4, 0xfffffffffffffffa, 0x3ff, 0x79e, 0x3ff, 0xc13, 0x100, 0xa8a8, 0x7, 0x1a, 0x10000, 0x9, 0x8, 0x2, 0x63d3, 0x4, 0x6, 0xe1, 0x4, 0x1, 0x400, 0x1000, 0x2, 0xf34, 0x6, 0x2, 0x40, 0x6, 0x8000, 0x0, 0x2, 0x8, 0x0, 0x8, 0x7, 0x9, 0x48b, 0x803, 0x4, 0x1, 0x8b38, 0x6, 0x3, 0x80000001, 0xffffffffffffffff, 0x4, 0x401, 0x8, 0x2, 0x6, 0x45, 0x7, 0x7ff, 0x7, 0x401, 0x81, 0x9, 0x8, 0x40c, 0x3f, 0x0, 0x8, 0x4, 0x5, 0x1f, 0x7b, 0x2, 0x521, 0xfff, 0xfffffffffffffffb, 0x3dd, 0x1f, 0x3, 0xfffffffffffeffff, 0xff800000000000, 0x6, 0x800, 0x5, 0x455d91dc, 0xc3, 0x4, 0x1, 0x9, 0x48, 0x2, 0x80, 0x40]}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x31, 0xa4, 0x1, 0x8, 0x0, 0x0, 0x1420, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x1, 0x28b, 0x0, 0x3f, 0x2, 0x4, 0x0, 0x6, 0x0, 0x5}, r1, 0xa, r2, 0x3) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$dsp(r0, &(0x7f00000000c0)="2f6b48ab191d22c8e596efa0f0b1fc3d78e0830241dd1bd06f93585508e4fc025f9b000376797597efb6dac51ce61a726716f6883e24e6b2316836c20c985447e60685d6e949215343e6736f97b1a46bb94dc0bccad5fd190bd2b568817e1f38ec37", 0x62) 10:26:35 executing program 2: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'rose0\x00'}) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'netdevsim0\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)) openat(r1, &(0x7f0000000240)='./file0\x00', 0x0, 0x90) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)=0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="85ec74ad2e5f4300000000"], 0x4) 10:26:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000065", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:35 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x34, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x1000000}, 0x0) 10:26:35 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="eb064f0291249feb01001800000789000000a9000000a900000002000000000000000000000b0000000000000000000000090000000000000000000000010000000000000000000000000400000f01000000000000000000000000000000006a220b20059bd271adbc8084de3d830000000000000000000000000000000000000000000000000000000000000000000000d5000000000000000800000000000000000000000b0000000000000000000000070000000000000000000000080000000000000000010000060400"/219], 0x0, 0xc6}, 0x20) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) fcntl$setown(r0, 0x8, r2) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) clone(0x40000, &(0x7f0000000240)="a9fa9657f0766faa38f056add11882a7a79659a3e0f134fed241ea5cdac6269f4998aff8896d53c4e59f7596032c7e", &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="d5d63ab7e62aaa01de60b592eec7249500f48f940c33f87ee31cfff5e69e84c774a58a396c01e09cae3d34fb295c0fd3e5a5964bf071ff4f138d742c8420b9b0b4565add8f1f979ca07ec8020c96e03e169ee9acd3ba6c50") process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000193c0)=""/102389, 0x18ff5}], 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x40) wait4(0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r3 = gettid() write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="2321202e2f66696c653020272026243a2d2d212027201a2f3a2c2025207d2c202d2d2f0a4d96ed817f63fcf2dcce21884696673e2b6f01d2b9fea3d340fcb3e8faf04e27ff31203f9419ad16e00fd2b61c2d5370839cee1aa69567681e1326eabf2d0e4811e7d9a7cc3c50b02988a37c1d57f4f3ae0e1e8bfc9731d69be817df14922bbfd7c28aac0c"], 0x84) wait4(r3, &(0x7f0000000380), 0x2, &(0x7f0000000440)) rt_sigqueueinfo(r3, 0x3c, &(0x7f0000000040)) 10:26:35 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x60, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x2000000}, 0x0) 10:26:35 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000017c0), 0x4200, 0x0) fcntl$getflags(r0, 0x409) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f00000001c0)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x44}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001700)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)=@bridge_getlink={0x3c, 0x12, 0x800, 0x70bd27, 0x25dfdbff, {0x7, 0x0, 0x0, r5, 0x2, 0x100}, [@IFLA_LINK={0x8, 0x5, r6}, @IFLA_PHYS_SWITCH_ID={0x13, 0x24, "5301f1476e44cb240f9688f9047f9a"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4080) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) r7 = signalfd(r1, &(0x7f0000000040)={[0x5]}, 0x8) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000100)=""/148) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000058", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x3000000}, 0x0) [ 717.979509][ T4108] batman_adv: Cannot find parent device 10:26:36 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x44200}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r2, 0x401) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42) read$dsp(r1, &(0x7f0000000180)=""/138, 0x8a) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000007c0)=0x9) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r1, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f00000000c0)=""/149, 0x95) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r4 = dup(r0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000240)=0xf59) 10:26:36 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x4000000}, 0x0) 10:26:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:36 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2349c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) [ 718.764984][ T4126] __nla_validate_parse: 22 callbacks suppressed [ 718.765006][ T4126] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 718.805519][ T4130] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 718.826572][ T4132] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 718.842540][ T4134] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:38 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x600, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:38 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0) preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x6000000}, 0x0) 10:26:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000001", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:38 executing program 0: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x247) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200), 0x9, 0x24000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)={0x10000, 0x1, 0x4, 0x100000, 0x7ff, {r3, r4/1000+10000}, {0x1, 0x0, 0x1c, 0x6, 0x5, 0x6, "a6ffdb96"}, 0x1000, 0x3, @offset=0x1, 0x1, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000840)={0x0, 0x1, 0x1, [0xaf0, 0x81, 0x6a, 0x5, 0xe1a9], [0xa2, 0x1, 0x5, 0x8, 0xe00000, 0x6, 0x2, 0x80, 0x6, 0x3, 0x40, 0x6, 0x6, 0x0, 0x200, 0x800, 0xffffffff, 0x5, 0x5, 0x80, 0x3, 0x4, 0x400, 0x8000, 0x5, 0x20, 0x2, 0x10001, 0x3, 0x2, 0x1ff, 0x7ff, 0x6, 0xe04c66d, 0x4, 0xfffffffffffffffa, 0x3ff, 0x79e, 0x3ff, 0xc13, 0x100, 0xa8a8, 0x7, 0x1a, 0x10000, 0x9, 0x8, 0x2, 0x63d3, 0x4, 0x6, 0xe1, 0x4, 0x1, 0x400, 0x1000, 0x2, 0xf34, 0x6, 0x2, 0x40, 0x6, 0x8000, 0x0, 0x2, 0x8, 0x0, 0x8, 0x7, 0x9, 0x48b, 0x803, 0x4, 0x1, 0x8b38, 0x6, 0x3, 0x80000001, 0xffffffffffffffff, 0x4, 0x401, 0x8, 0x2, 0x6, 0x45, 0x7, 0x7ff, 0x7, 0x401, 0x81, 0x9, 0x8, 0x40c, 0x3f, 0x0, 0x8, 0x4, 0x5, 0x1f, 0x7b, 0x2, 0x521, 0xfff, 0xfffffffffffffffb, 0x3dd, 0x1f, 0x3, 0xfffffffffffeffff, 0xff800000000000, 0x6, 0x800, 0x5, 0x455d91dc, 0xc3, 0x4, 0x1, 0x9, 0x48, 0x2, 0x80, 0x40]}) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x31, 0xa4, 0x1, 0x8, 0x0, 0x0, 0x1420, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x0, 0x1, 0x28b, 0x0, 0x3f, 0x2, 0x4, 0x0, 0x6, 0x0, 0x5}, r1, 0xa, r2, 0x3) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write$dsp(r0, &(0x7f00000000c0)="2f6b48ab191d22c8e596efa0f0b1fc3d78e0830241dd1bd06f93585508e4fc025f9b000376797597efb6dac51ce61a726716f6883e24e6b2316836c20c985447e60685d6e949215343e6736f97b1a46bb94dc0bccad5fd190bd2b568817e1f38ec37", 0x62) 10:26:38 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r1, 0x80000) [ 720.559557][ T4151] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 720.590878][ T4152] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:38 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x700, @multicast2=0xac14140a}}}}}}, 0x0) [ 720.627720][ T4157] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 720.670681][ T4158] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x8000000}, 0x0) 10:26:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:38 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5456, &(0x7f0000000000)) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000500)={0x2, 0x1, 0x7, 0x1d, 0xb3, &(0x7f0000000100)="80de66d5127ef06afff8ee3827bf0a550da41da84a53c2dab04bddc80c5089a93e299ad0bf772ff493b9cb598486090fc5147fb58b5958da627243cca017939b1fd74d31ec09c305bf2b9611ab792d7928e98578aca6a967d44e60aad8b873f502dee4e23d91e3232ea0a7e36ebcfcc271f2004746ba87176ec02a63b0297297aff930b26f737bd254a4a2189a0fc8f77a5589f7f15dbcc14bccf6bd28c85df3cf34859df9d5bb940e05801519be79f7d277fffbb0acc6db8c17b2d646c7e5633dbf28591c3749eed3705e6adaba3c2b21908cacd9f66525fa9faa6f5b5c72acfa7ceb4f3ad0d9507a887cef7e4c2c89525e69b191ec54e8fea1b5f865632d68903d9e7ff705e6246064733513a79f54772e0bbe5aeae0f3260674169850cf57ae69e9ccfc3daae514df1a0512b63475281cc9aee5efd16d49410cfaac2c80521a7b8595a9d5da4f600ec0e62a15686b202b186c97b7fa9a9f8e91f40ddee405cd09f7fa86c458a486e6dd9c46810a6527abdf2ebe853e87dab630b3eaad9e5b8115d95ebe7df456cf4f82b90bed8c85a057824b050c787b98a06eb052d993c3b9afbd8e0cada413728008d8be3b6a5cbdf91e2903d19447c2292099f9fd00ed39fb2a67c218caa11999d0b88ff67371ee53e3e7cdb6799dd5c14251dd50dd7cc76b17751804b28c19ddf66f15759392ee9dc016706217db93a7a3f06e85860ee2a9ec3569e12930de0963e1cb0ae2bbea341f06ec6d6bb852792e6f2441d2c3af89bed4987a58452df7dbe020bf77f036019bb0b590a153ce44df28adfd7c518580c50efd8f09c49c5cd16333b2420143f758aa8833b8884c06e63f7792a4e94a87012aea8721f9938dc7b8b41733f2aaebb2424d489f08ef63aeeaeccf2b498ec17c9ea5ed7ad140a60fb53af3bd647001ca64b7175756c8121b23d19f88ab5ced886f54c81138a72eb119298053bcad3e286a35b6157862d22be09132306c3ba1db5bbbe7f5c3e8690d8e55f6bf72df394270224a2f396143fc80e2028d236b1f06525a4889cd4278d9dc61a54857d1506209d2d4c6fe59109a1e37736862c7733abaec2cf726e114bcbcafe77c5885e2a59de22fbdb64891dfaaa8b06d1f7b128e3c3e365c3e29b1e30929616cf3533b3598cbfd9f52e5d866373d936c726c2150d6818fe01cdb4b335e74da87cfafef3256fb52780866515436c6601bd33fe17650b06f5819edbf3cfae616e61c1755455b15cb7b48ff07a45f09836ee15c94b7ae80f72eb3e80a68c0a0214554665870628e775bc3134ca0bce1bb45d7e0f69773399267b76488f94638390ba9d775591f264e63b1c63823bef80e8521c5a539ae2f8e5a9c5f3f6f71629b9758171ad09ae1f96ecf79181df73cf4524187b89701ee16a0fe88e4fd086e6e882e7aed6a0b5fd3c3216db1282cb6f46901"}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'veth1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/consoles\x00', 0x0, 0x0) fcntl$getflags(r4, 0x401) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000040)={0x0, 0x3, 0x7}) openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x900, 0x0) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000000)=0x1) 10:26:38 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb00, @multicast2=0xac14140a}}}}}}, 0x0) [ 720.908071][ T4174] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 720.988280][ T4181] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:38 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r2, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) ftruncate(r2, 0x6) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000210000/0x3000)=nil, 0x3000, 0x1800003, 0x30, 0xffffffffffffffff, 0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x7, 0x3da3, 0x5, 0x1, 0xeef, 0xffff, 0xfe70], 0x7, 0x80000}) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) 10:26:38 executing program 0: mq_open(&(0x7f0000000100)=']\x00', 0x40, 0x0, 0x0) mq_open(&(0x7f00000000c0)='-$+\x00', 0x40, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0x7fff, 0x0, 0x0, 0x7, 0xff, "5f108be39ea94ce9bc4227dafd7b47c6af60ee", 0x1, 0x1000}) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000040)={0x5, 0x1, 0x8}) 10:26:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x9000000}, 0x0) 10:26:38 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1c00, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:38 executing program 2: semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x4}, {0x0, 0x0, 0x1000}], 0x2, &(0x7f0000000100)={0x77359400}) semop(0xffffffffffffffff, &(0x7f0000000140)=[{0x4, 0x1c}, {0x7, 0x0, 0x800}, {0x2, 0x3b, 0x800}, {0x3, 0xff42, 0x1800}, {0x0, 0x3, 0x1000}], 0x5) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:39 executing program 0: recvmsg$unix(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000200)=""/88, 0x58}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/138, 0x8a}, {&(0x7f0000001400)=""/162, 0xd}, {}, {&(0x7f00000014c0)=""/92, 0x5c}], 0x6, &(0x7f0000000280)}, 0x20000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@allocspi={0x11c, 0x16, 0x1, 0x0, 0x0, {{{@in=@local, @in6=@private1}, {@in6=@private1, 0x0, 0x33}, @in6=@private0}, 0x0, 0x8001}, [@lifetime_val={0x24}]}, 0x11c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fspick(0xffffffffffffff9c, &(0x7f0000001600)='./file0\x00', 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) poll(&(0x7f0000001640)=[{r1, 0x20}, {r2, 0x4a}, {r3, 0x40}, {r5, 0x84}, {r0, 0x2300}], 0x5, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000280)={0x3, [0x0, 0x0, 0x0]}) 10:26:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xa000000}, 0x0) 10:26:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f00, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:39 executing program 2: setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x108) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:39 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000111402002dbd7000fddbdf250800010002000000080003000100000008004a008000000008004b006ec20d5208004f000100000008003e000400000008004b0013000000"], 0x48}, 0x1, 0x0, 0x0, 0x240448c0}, 0x4008810) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x5, 0x3805, 0x6}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'geneve0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) signalfd4(r2, &(0x7f0000000200)={[0x66457c1b]}, 0x8, 0x100800) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x4) 10:26:39 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3000, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xc000000}, 0x0) 10:26:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:39 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x4, 0x4, 0x20, @empty, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7800, 0x1, 0x3, 0x96b}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x5) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000180)={0x0, &(0x7f00000000c0)="214b15d47eef7a7379df2b9e0f4ec3c4b9f36cafed028e612e6e761e51575325fbb0f9d5b94933bbb60a86b70082db28bad10676257887886ee10d773ebeb909ba39580bcbb97750e95c906d415b0bd3538d11ed232bb2442b3afa36c1aaf30e34", 0x61}) 10:26:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3400, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xe000000}, 0x0) 10:26:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:39 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ip6_vti0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) 10:26:39 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000050cb5320450c10108e490102030109021b00010400000009040000017b35040009058dffff7ff57d18c67389c9ebbc89b034ed14d3961b190115c4a493c15bb0e3f3037ca4c0"], 0x0) r1 = syz_usb_connect$uac1(0x1, 0xcc, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x7, 0x10, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x40, 0x7f, "c52025016a"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x7f, "1f8c92b552"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xfb, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x20, 0x0, {0x7, 0x25, 0x1, 0x0, 0x8, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8000, 0x8, 0x39, "8ccd"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x3f, 0x4}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x35, 0x2, 0x2, 0x1f}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x2, 0x6, 0xff, "48872f"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x81, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x1, 0x3, 0x7f, 0x1, "ab6e9d0726"}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x7f, 0x1f, 0xcf, {0x7, 0x25, 0x1, 0x1, 0x81, 0x5}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x8, 0xf8, 0x5, 0x40, 0x4}, 0x20, &(0x7f00000001c0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xb7, "64ea1ba322434b6987811eaa39fba12e"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x4, 0x1}]}, 0x6, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x409}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x801}}, {0x29, &(0x7f00000002c0)=@string={0x29, 0x3, "dd0a4613cf8a2357adb3f2c97694916a55ffdf96ad70b10531d3f289f06499ea54af8512ae3b1e"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x43f}}, {0x4b, &(0x7f0000000340)=@string={0x4b, 0x3, "192ad5074ae4ec89e23b92d645da49d901105315fe8ab0980154c727cae435ac5a4c03c4e660f4170a7b6835ed76829b0c36ee06e1e4116bb67cc6879f1ceaea7d7f0482273972b032"}}]}) syz_usb_control_io(r1, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x10, 0xd, 0xd0, {0xd0, 0x24, "fb1a257d91a8236a8897dbd3a4c8362b31c7aa5a0ac4b32d8de0e7a4089203954e7a073401bf4b8a4f2aa43b9a76050e610e441f62ea4689b5f0434da143aba42e56cb7c447f0e57c98b5850ebe4a171b3d8502f090efe017e7746d09e4e5480602e7d6d47cfe5116730245c4d3a5e500b1e03ba5106eb6fe65f5b36ca1435cdf72f3ece0f89e356afa2a532d324582a33d0accf59d9aa11c86df74806e40b3664c9ec93b722f098d1f21e07760e9c688c61fc0405f8b3bcc8268604621ece475dc635a4612426e99a3538a7107b"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f0000000580)={0x0, 0xf, 0x98, {0x5, 0xf, 0x98, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x3, 0xfff}, @generic={0x8c, 0x10, 0x2, "016fc1a26fb65aa4fc7f7dbbc850b993e665802f76d792db5272e734c8f6a3cba5dd8ca495215d47ebe5e71267a96177ceb2edaa5e9b2be80eebf250ad6793c1766890a110982ef79e7622cc5fce9ec474824c419516c2ee67f550a21e92df952f58b588642fe19bc388626a1437fd3379b5094283ae50db72395b331693e8b34433261099431f6b30"}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x18, 0x3, 0x7, "fc5597ca", "54d8efc7"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1f, 0x4, 0x78, 0xef, 0x80, 0x6, 0x2}}}, &(0x7f0000000b80)={0x84, &(0x7f0000000700)={0x0, 0x7, 0x7f, "65e117e7e98c511517f05f2ec7a2fd0f5a2d4b84a488708dc42bd017dc376825091f6f1591a130efb0a3a627e186716195c945a3b73cedf9a4dd018c9f7e46587fcb1c65b81d97fd82833eff5cc0871f4180cbbb892c99f5961ffd574bbe6d81f44955b0425ce01ea4262523ca04f8d66fcfb1e9bafbe819c342eb38f89efb"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x4, 0x80}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000000900)={0x40, 0x9, 0x1}, &(0x7f0000000940)={0x40, 0xb, 0x2, "9a1d"}, &(0x7f0000000980)={0x40, 0xf, 0x2, 0x1e}, &(0x7f00000009c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000a00)={0x40, 0x17, 0x6, @random="a4fdff271cba"}, &(0x7f0000000a40)={0x40, 0x19, 0x2, '=-'}, &(0x7f0000000a80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000ac0)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000b40)={0x40, 0x21, 0x1, 0xfc}}) read$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000d80)={0x14, &(0x7f0000000c40)={0x0, 0x5, 0xc6, {0xc6, 0x22, "c9548c3f409d109ecffc173a5c1156b5f915346bc69305609ac7553a8efdf754fd621b9e8c98c85fe21b735c6de95ba848c420888296c52f58940ec9212a42a8bd34a0b66c048890029d149fdc9251091942bee61cb876a76c3b1ebd56734ffa43fd3bd54a624a6ac1427b42cdbc960f8bc75ea2b6381f99e48097450b3c0aea2abc8b88799d8f34771cb6f7da7af621926d72b808cc2a41dd47f560a441045d3bb27c10416f44f69a289f2637fd54b00b2ce8c7d2fa4ca4e0d555ea581552108644a48f"}}, &(0x7f0000000d40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001040)={0x44, &(0x7f0000000dc0)={0x40, 0x0, 0xa0, "7bf4c8146fe2f8ff87b610d7b5d734da78f0177412b57ddfbbe6c3cbf314cb344d40dca5c33140f9e11f913d9ec419ad7f8a7fd40cee36b2a82004516b8944b55a258cea15d026b9c35da9816e40d6991259aa4cb14d818f456e3dbf71d27401a1f5fdf513c6c79aa190498d8ede6ad50970726f02f6b6c37bde5b2f59ae464b8019a47c964c08da18d86ad0c167a6613e81d3e74b9ab1e34d38407a780148de"}, &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x38}, &(0x7f0000000ec0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000f00)={0x20, 0x80, 0x1c, {0x2, 0x800, 0x8, 0x2, 0x5, 0x0, 0x5, 0x8, 0x4, 0xff, 0x101, 0x7ff}}, &(0x7f0000000f40)={0x20, 0x85, 0x4, 0x3}, &(0x7f0000000f80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000fc0)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000001000)={0x20, 0x89, 0x2}}) 10:26:39 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x100010, 0xffffffffffffffff, 0x0) 10:26:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf000000}, 0x0) 10:26:39 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3f00, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:40 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) splice(0xffffffffffffffff, &(0x7f0000000100)=0x9, r1, &(0x7f0000000140)=0x9, 0x4, 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000040)=0x1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) fchown(0xffffffffffffffff, r3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000380)={0x0, r2, 0x1f, 0x5, 0x821, 0x38000000}) r4 = getegid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000002c0)={0x90, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x9, 0x8, 0x40, 0x0, {0x1, 0x10000, 0xaba, 0x200, 0x0, 0x800, 0x3ff, 0x1f, 0x8, 0x6000, 0x9, r3, r4, 0xe27, 0x1}}}, 0x90) r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x30, r5, 0x224cd000) preadv(r5, &(0x7f0000000280)=[{0x0, 0x10}, {&(0x7f0000000500)=""/216, 0xd8}], 0x2, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f00000003c0)=&(0x7f0000000240)) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000000)) 10:26:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000, @multicast2=0xac14140a}}}}}}, 0x0) [ 722.481783][ T8534] usb 1-1: new high-speed USB device number 27 using dummy_hcd 10:26:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x10000000}, 0x0) 10:26:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:40 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6000, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:40 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_virt_wifi\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'bond_slave_1\x00'}) pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="55653eeebaa2664865f467b2844c05c4ea385a0c4c9ebfca57b12cba662c237287b3241ef421a9408d047116e0cc0fd9940e70886d3fc56475fea629363951c07548e60fe54c6dc19feed4cd173f97dc9687c3fb7a4d62f209421567081382de64bdf39549ce5c94f2740445186d68a1267a3f27b333d23afd3240f021aa1d97", 0x80}, {&(0x7f0000000200)="0d35c70ac3b38eccdeb37fc16caedf1c57eeb0a55f46e3f43116552c90762e92eafde1235a8fb8b368721be9912cfe2ebd901e3fced6a9887ba59d54f265366f473afd41cf716362cc17222519a2dc4e7602905054eda41bec873827034c408985636aa14f", 0x65}], 0x2, 0x800, 0x9) 10:26:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x60000000}, 0x0) [ 722.741744][ T8534] usb 1-1: Using ep0 maxpacket: 32 [ 722.882168][ T8534] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 245, changing to 11 [ 722.915606][ T8534] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 2047, setting to 1024 [ 723.111747][ T8534] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 723.120811][ T8534] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.151544][ T8534] usb 1-1: Product: syz [ 723.156500][ T8534] usb 1-1: Manufacturer: syz [ 723.161114][ T8534] usb 1-1: SerialNumber: syz [ 723.212022][ T4274] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 723.246069][ T8534] yurex 1-1:4.0: USB YUREX device now attached to Yurex #0 [ 723.446507][ T4274] udc-core: couldn't find an available UDC or it's busy [ 723.461548][ T4274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 10:26:42 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x20) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:42 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:26:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:42 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) recvmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000200)=""/155, 0x9b}, {&(0x7f00000002c0)=""/168, 0xa8}], 0x2, &(0x7f0000000380)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x1) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x4, 0x4, 0x80, 0x0, 0x7f, 0xa0000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0xe4ad, 0x3}, 0x100, 0x7ff, 0xffffffff, 0x4, 0x7, 0x1000, 0x1, 0x0, 0x0, 0x0, 0x2ab9eb3d}, r0, 0xe, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) 10:26:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x65580000}, 0x0) [ 725.160952][ T20] usb 1-1: USB disconnect, device number 27 10:26:42 executing program 0: r0 = perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x8}, 0x0, 0x0, 0x400, 0xc, 0x4, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000200)=0x1, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0x2710}, 0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000080)=""/128, 0x80, 0xfffffffe, 0x80000000}) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='vcan0\x00', 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x6d) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x81, 0x1210}, 0x14) write$binfmt_misc(r2, &(0x7f0000000300)=ANY=[], 0xff01) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b01006772657461700000140002800800010000", @ANYRES32=r6, @ANYBLOB="060003003fff0f00"], 0x44}}, 0x0) r7 = geteuid() setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2, @in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4e24, 0x82d7, 0x4e21, 0xffff, 0xa, 0x0, 0x20, 0x2f, r6, r7}, {0x5, 0x54a74128, 0xe38b, 0x5, 0x5775b083, 0x8, 0x2, 0x20}, {0x7, 0x4a222621, 0x494dcfc3, 0x1}, 0x2, 0x6e6bb7, 0x0, 0x1, 0x2, 0x2}, {{@in=@private=0xa010101, 0x4d6, 0x3c}, 0x2, @in=@rand_addr=0x64010101, 0x34ff, 0x0, 0x2, 0x4, 0x1, 0xfffffff7, 0x1}}, 0xe8) splice(r1, 0x0, r3, 0x0, 0x18108, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff0000006dd18423c7501c084c0f166b1a13e246803a8c33dd2897e4c82fafb98f71274c20be43f960783d22ba88dc00000000000000a3987b9c6d3ed0f0d91c604e1b", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) [ 725.242948][ T20] yurex 1-1:4.0: USB YUREX #0 now disconnected [ 725.244530][ T4342] __nla_validate_parse: 28 callbacks suppressed [ 725.244547][ T4342] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:43 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x2}}}}}}, 0x0) [ 725.339447][ T4345] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.372125][ T4354] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 725.397106][ T4358] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 725.416959][ T4357] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x81000000}, 0x0) 10:26:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 725.475649][ T4354] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 725.515568][ T4365] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 10:26:43 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) r2 = signalfd(r0, &(0x7f0000000100)={[0x5]}, 0x8) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x8001) fcntl$getflags(r1, 0x401) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000040)) ioctl$FITHAW(r1, 0xc0045878) [ 725.571790][ T4363] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 10:26:43 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x3}}}}}}, 0x0) [ 725.628532][ T4367] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/51, 0xfeb8}], 0x1}}], 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@updpolicy={0x178, 0x19, 0x20, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x80, 0x26, 0x0, 0xffffffffffffffff}, {0x9d1f, 0x5, 0x1, 0x200, 0x6, 0x5, 0x3, 0x7}, {0x10000, 0x7, 0x8, 0x4}, 0x8001, 0x6e6bb4, 0x1, 0x0, 0x2}, [@extra_flags={0x8, 0x18, 0x100}, @sec_ctx={0xb8, 0x8, {0xb4, 0x8, 0x1, 0xe0, 0xac, "b25c366688a2dc03b7152ee38259b7c8583e4e926120110ded8fce6099e3e7a652b3c8d9e621576f39236516717fbac451d4eff0b0b1fe3cb57d55dbf9e0beba8b38cbca9330a1ffd799b8d402e7864da73593bc23214afea0c1e8afbb640d4a9656caf61aef8bfe5587d5405eaf5c650b2efe7e86d0822979db3b5107fc34427e8e9990c38e0037962ba7b764cb9db6e583588648903a8a61a3b4e2b909ad8f1f969945f62fdd7163026094"}}]}, 0x178}}, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xa0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 725.679762][ T4370] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:43 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x8, 0x20, {0x0}, {0xee01}, 0x9, 0x6a}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x5, 0x7, 0x2, 0x3, 0x0, 0x3f, 0x800, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000040), 0xe}, 0x8040, 0x0, 0x25, 0x8, 0xfffffffffffffffb, 0x9, 0x9, 0x0, 0x80000000, 0x0, 0x10001}, r0, 0x9, 0xffffffffffffffff, 0x8) 10:26:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x88a8ffff}, 0x0) 10:26:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:43 executing program 2: write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e02", 0x11) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000006c0)) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/dvb_usb_gp8psk', 0x20800, 0x48) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'veth0_vlan\x00', {0x2, 0x0, @private}}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000100)) 10:26:43 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x6}}}}}}, 0x0) 10:26:43 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=""/51, 0xfeb8}], 0x1}}], 0x2, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@updpolicy={0x178, 0x19, 0x20, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x4e20, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x80, 0x26, 0x0, 0xffffffffffffffff}, {0x9d1f, 0x5, 0x1, 0x200, 0x6, 0x5, 0x3, 0x7}, {0x10000, 0x7, 0x8, 0x4}, 0x8001, 0x6e6bb4, 0x1, 0x0, 0x2}, [@extra_flags={0x8, 0x18, 0x100}, @sec_ctx={0xb8, 0x8, {0xb4, 0x8, 0x1, 0xe0, 0xac, "b25c366688a2dc03b7152ee38259b7c8583e4e926120110ded8fce6099e3e7a652b3c8d9e621576f39236516717fbac451d4eff0b0b1fe3cb57d55dbf9e0beba8b38cbca9330a1ffd799b8d402e7864da73593bc23214afea0c1e8afbb640d4a9656caf61aef8bfe5587d5405eaf5c650b2efe7e86d0822979db3b5107fc34427e8e9990c38e0037962ba7b764cb9db6e583588648903a8a61a3b4e2b909ad8f1f969945f62fdd7163026094"}}]}, 0x178}}, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0xa0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}) 10:26:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x7}}}}}}, 0x0) 10:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x96010000}, 0x0) 10:26:44 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x20) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:44 executing program 0: syz_usb_connect(0x0, 0xb3, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES64], 0x0) 10:26:44 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42) r2 = dup3(r1, r0, 0x80000) read$dsp(r2, &(0x7f00000000c0)=""/156, 0x9c) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r1, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 10:26:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x8}}}}}}, 0x0) 10:26:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x9effffff}, 0x0) 10:26:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0xb}}}}}}, 0x0) 10:26:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf0ffffff}, 0x0) 10:26:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000041c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) syz_open_procfs$userns(r2, 0x0) getpid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0), 0x20601, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x45) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r1, 0x0, 0xdc) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[], 0x151) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000002db1b4aa0a1f5c20fb8ef0702b60b48648451dfe3431f830b9b4278d51edd2dcbda3c094c7f7b4b6822353488f4cd059e72bc058d3d6bd5982a3adb02ffdbb006bfc69c7f250d0b2ba3550a9e56c6805539852e70e7bd6956610933c4339cd7f1d5ae0", @ANYRES16=r4, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001e00080129bd7000fcdbdf25000000000c2788f0b1d6b0e1ca2601ed9850cfc0d9273b9061e901d9d98ba2aaad944a5b055d26305b9d81f5b3b1b657f5d2a72fec6e296cbd8f1498a5313ec0f4be93394b9068025b4421849b070841fd75fe32f9675e77b3f8ca2c84f7eccb4a5a5f69f712ab118189103427d126778659ff0a0dfac2e994999ae9"], 0x14}}, 0x0) close(r5) 10:26:44 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x360d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4000000, 0x3bfd}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r1, 0x40a) write$dsp(r1, &(0x7f0000000040)="98fb84092357", 0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000140), 0x905c, 0x80200) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x40, 0x7, 0x77, 0xb, 0x0, 0xff, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x40, 0x4, @perf_bp={&(0x7f0000000100), 0x7}, 0x3505, 0x0, 0x2bb96890, 0x4, 0xbc29, 0x8001, 0xff, 0x0, 0x200, 0x0, 0x100000000}, 0x0, 0xf, 0xffffffffffffffff, 0x3) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x1ff, 0x0, 0x9, 0x8, 0xfffffffc}) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 726.991540][ T8534] usb 1-1: new high-speed USB device number 28 using dummy_hcd 10:26:44 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x1c}}}}}}, 0x0) 10:26:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 727.211427][ T8534] usb 1-1: device descriptor read/64, error 18 [ 727.486958][ T8534] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 727.711514][ T8534] usb 1-1: device descriptor read/64, error 18 [ 727.831723][ T8534] usb usb1-port1: attempt power cycle [ 728.281462][ T8534] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 728.451584][ T8534] usb 1-1: device descriptor read/8, error -61 [ 728.721319][ T8534] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 728.901611][ T8534] usb 1-1: device descriptor read/8, error -61 [ 729.022282][ T8534] usb usb1-port1: unable to enumerate USB device 10:26:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xffffa888}, 0x0) 10:26:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:47 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 10:26:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x30}}}}}}, 0x0) 10:26:47 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x3, 0x3}, 0xc) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@newtclass={0x84, 0x28, 0x0, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x3}, {0xffe7, 0xa}, {0x7, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x34, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x9}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9cb2}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x467c}, @TCA_QFQ_LMAX={0x8}, @TCA_QFQ_LMAX={0x8, 0x2, 0x80}, @TCA_QFQ_LMAX={0x8, 0x2, 0xbeb}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24004080}, 0x4) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000022ee5980660e0d4c1100cc06000000000000000000df00000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000d00010066715f636f64656c000000000c0002000800070000000000"], 0x40}}, 0x0) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x3, &(0x7f0000000100)=0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@deltaction={0x3c, 0x31, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000d050) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r5, 0x401) ioctl$USBDEVFS_RESET(r5, 0x5514) 10:26:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:47 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000106000/0x1000)=nil, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000759000/0xf000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000300)={0x77359400}, 0x1, 0x0, 0x1}, 0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x2c63, &(0x7f00000001c0)={0x0, 0x504d, 0x8, 0x3, 0x383}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000380), &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1}}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:26:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xfffff000}, 0x0) 10:26:47 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x34}}}}}}, 0x0) 10:26:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xffffff7f}, 0x0) 10:26:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:47 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r0, 0x401) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) read$dsp(r1, &(0x7f00000000c0)=""/7, 0x7) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r1, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) [ 730.314365][ T4513] __nla_validate_parse: 28 callbacks suppressed [ 730.314387][ T4513] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 730.428528][ T4515] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 730.460777][ T4517] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 730.526147][ T4518] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:48 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 10:26:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x60}}}}}}, 0x0) 10:26:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xffffff9e}, 0x0) 10:26:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 730.874027][ T4528] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x300}}}}}}, 0x0) [ 730.920456][ T4531] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 730.943451][ T4534] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:48 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000106000/0x1000)=nil, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000759000/0xf000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000300)={0x77359400}, 0x1, 0x0, 0x1}, 0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x2c63, &(0x7f00000001c0)={0x0, 0x504d, 0x8, 0x3, 0x383}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000380), &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1}}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) [ 730.998104][ T4536] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xfffffff0}, 0x0) 10:26:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:48 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x600}}}}}}, 0x0) [ 731.303030][ T4544] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7f, 0x81, 0x0, 0x2c, 0x0, 0xf7, 0x800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x8, @perf_bp={&(0x7f0000000040), 0x8}, 0x820, 0x5, 0x5, 0x5, 0x6, 0x9, 0x401, 0x0, 0x7b34, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 731.367813][ T4549] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x40030000000000}, 0x0) 10:26:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x700}}}}}}, 0x0) 10:26:49 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 10:26:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf0ffffffffffff}, 0x0) 10:26:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0xb00}}}}}}, 0x0) 10:26:49 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r1, 0x401) ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000040)) fork() clock_gettime(0x0, &(0x7f00000077c0)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007580)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/193, 0xc1}, {&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f00000002c0)=""/240, 0xf0}, {&(0x7f0000000440)=""/163, 0xa3}], 0x4, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000000600), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/143, 0x8f}, {&(0x7f0000000840)=""/27, 0x1b}, {&(0x7f0000000880)=""/36, 0x24}, {&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/105, 0x69}, {&(0x7f0000000980)}, {&(0x7f00000009c0)=""/83, 0x53}, {&(0x7f0000000a40)=""/62, 0x3e}], 0x8}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b00)=""/34, 0x22}, {&(0x7f0000000b40)=""/176, 0xb0}, {&(0x7f0000000c00)=""/94, 0x5e}, {&(0x7f0000000c80)=""/152, 0x98}], 0x4, &(0x7f0000000d80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000000dc0)=""/206, 0xce}, {&(0x7f0000000ec0)=""/173, 0xad}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/68, 0x44}, {&(0x7f0000002000)=""/82, 0x52}, {&(0x7f0000002080)=""/19, 0x13}], 0x6, &(0x7f0000002140)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002180)=@abs, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, &(0x7f0000003240)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/49, 0x31}], 0x2, &(0x7f0000004300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{0x0, 0x0, &(0x7f00000045c0)=[{&(0x7f0000004380)=""/118, 0x76}, {&(0x7f0000004400)=""/69, 0x45}, {&(0x7f0000004480)=""/236, 0xec}, {&(0x7f0000004580)}], 0x4, &(0x7f0000004600)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000005cc0)=[{&(0x7f00000046c0)=""/179, 0xb3}, {&(0x7f0000004780)=""/252, 0xfc}, {&(0x7f0000004880)=""/174, 0xae}, {&(0x7f0000004940)=""/228, 0xe4}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)=""/103, 0x67}, {&(0x7f0000005ac0)=""/165, 0xa5}, {&(0x7f0000005b80)=""/212, 0xd4}, {&(0x7f0000005c80)=""/27, 0x1b}], 0x9, &(0x7f0000005d80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f0000005ec0), 0x6e, &(0x7f0000007480)=[{&(0x7f0000005f40)=""/103, 0x67}, {&(0x7f0000005fc0)=""/10, 0xa}, {&(0x7f0000006000)=""/144, 0x90}, {&(0x7f00000060c0)=""/146, 0x92}, {&(0x7f0000006180)=""/115, 0x73}, {&(0x7f0000006200)=""/177, 0xb1}, {&(0x7f00000062c0)=""/61, 0x3d}, {&(0x7f0000006300)=""/106, 0x6a}, {&(0x7f0000006380)=""/4096, 0x1000}, {&(0x7f0000007380)=""/198, 0xc6}], 0xa, &(0x7f0000007540)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40010100, &(0x7f0000007800)={r2, r3+60000000}) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3, 0x80, 0x7, 0x6, 0x0, 0x2, 0x2a002, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x358f6158, 0x1}, 0x5240, 0x800, 0x7dd6ea60, 0x2, 0x2, 0x2, 0x0, 0x0, 0xe376, 0x0, 0xfff}, r4, 0xe, r1, 0x1) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:49 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000106000/0x1000)=nil, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000759000/0xf000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000300)={0x77359400}, 0x1, 0x0, 0x1}, 0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x2c63, &(0x7f00000001c0)={0x0, 0x504d, 0x8, 0x3, 0x383}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000380), &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1}}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:26:49 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x1c00}}}}}}, 0x0) 10:26:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x100000000000000}, 0x0) 10:26:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x1f00}}}}}}, 0x0) 10:26:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x200000000000000}, 0x0) 10:26:50 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) io_uring_enter(r0, 0x45f5, 0x0, 0x0, 0x0, 0x200000000000000) 10:26:50 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x3000}}}}}}, 0x0) 10:26:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x300000000000000}, 0x0) 10:26:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:50 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x5) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000280)=0xffc) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) write$dsp(r2, &(0x7f00000000c0)="a7dbf6380ca0594a86d3b4650fc9db5b5e11a3db53cedb4bfd199bd96516c194c9c679dda9e1327ee86cfeaef376563493144968d758c31a7ede21cfe4d4ad535bdcef8b62daf237355f5b311fdbe647e09cc5a3835b0ef409794643a1e3fe3079996c7def3fc64535a7c8fcf4dc88bc56535d00823ff470453e69898b94e689cf5ff0fd5201b71cd51d71ab4bb2", 0x8e) r3 = fork() r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x3, 0x2, 0x4, 0x7f, 0x0, 0x5, 0x100, 0x4, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={&(0x7f0000000040), 0x6}, 0x46000, 0xce, 0x6, 0x9, 0x8, 0x3, 0x0, 0x0, 0x5, 0x0, 0x6}, r3, 0x8001, r4, 0x14) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:51 executing program 2: r0 = syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000106000/0x1000)=nil, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r4 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f00006d5000/0x2000)=nil, &(0x7f0000759000/0xf000)=nil, &(0x7f0000000400)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd82, 0x10041}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000340)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x2, &(0x7f0000000300)={0x77359400}, 0x1, 0x0, 0x1}, 0x7) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000040)=""/18, 0x12}, 0x0) syz_io_uring_setup(0x2c63, &(0x7f00000001c0)={0x0, 0x504d, 0x8, 0x3, 0x383}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000380), &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r7, &(0x7f0000000480)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x1}}, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x2ff, 0x0, 0x0, 0x0, 0x0) 10:26:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x3400}}}}}}, 0x0) 10:26:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x400000000000000}, 0x0) 10:26:51 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x3f00}}}}}}, 0x0) 10:26:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d000000000000000000000088", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x600000000000000}, 0x0) 10:26:52 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) 10:26:52 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) close_range(r0, r0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x4000}}}}}}, 0x0) 10:26:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x800000000000000}, 0x0) 10:26:52 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @empty, 0x10001}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10:26:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x6000}}}}}}, 0x0) 10:26:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000007f", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x900000000000000}, 0x0) 10:26:52 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)=0x9) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/219, 0xdb}, {&(0x7f00000002c0)=""/104, 0x68}], 0x4, 0x5, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000340)=0xfffffffa) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:52 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x1000000}}}}}}, 0x0) 10:26:52 executing program 2: perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x8, @empty, 0x10001}, 0x1c) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7000, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x101d0}], 0x1}}], 0x92, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 10:26:53 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) 10:26:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00000000000000000000009e", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xa00000000000000}, 0x0) 10:26:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x2000000}}}}}}, 0x0) 10:26:53 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x8b280, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = signalfd4(r0, &(0x7f0000000040)={[0xfe00000000000000]}, 0x8, 0x800) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)=0xffffffff) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000007c0)=0x9) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) read$dsp(r1, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r4, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) [ 735.605654][ T4684] __nla_validate_parse: 36 callbacks suppressed [ 735.605674][ T4684] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 735.666448][ T4685] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 735.686123][ T4687] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 735.738039][ T4691] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x3000000}}}}}}, 0x0) 10:26:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000f0", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xc00000000000000}, 0x0) [ 736.156293][ T4700] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:26:53 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x6000000}}}}}}, 0x0) 10:26:53 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) [ 736.227355][ T4704] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 736.293860][ T4707] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 736.330409][ T4708] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:54 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:54 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000000081) 10:26:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x7000000}}}}}}, 0x0) 10:26:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xe00000000000000}, 0x0) [ 736.688837][ T4719] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 736.740135][ T4722] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:26:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x8000000}}}}}}, 0x0) 10:26:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d0000000000000000000000ff", @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf00000000000000}, 0x0) 10:26:54 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000000081) 10:26:54 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0xb000000}}}}}}, 0x0) 10:26:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x1000000000000000}, 0x0) 10:26:55 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) 10:26:55 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) sendfile(0xffffffffffffffff, r2, 0x0, 0x4000000000000081) 10:26:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x1c000000}}}}}}, 0x0) 10:26:55 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) dup3(r2, r0, 0x80000) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x400000, 0xffffffffffffffff, 0x0) read$dsp(r1, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 10:26:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x6000000000000000}, 0x0) 10:26:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x6558000000000000}, 0x0) 10:26:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x1f000000}}}}}}, 0x0) 10:26:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:55 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) 10:26:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x8100000000000000}, 0x0) 10:26:55 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x30000000}}}}}}, 0x0) 10:26:56 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:56 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xc1, 0x0, 0x3}) close(r1) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r2, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 10:26:56 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) 10:26:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x88a8ffff00000000}, 0x0) 10:26:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x34000000}}}}}}, 0x0) 10:26:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:56 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000015c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001480)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000001500)=""/140, 0x8c}], 0x2, &(0x7f0000001440)=""/46, 0x2e}, 0x0, 0x0, 0x0, {0x3}}, 0x7) r8 = dup(r5) sendfile(r8, r2, 0x0, 0x4000000000000081) 10:26:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x9601000000000000}, 0x0) 10:26:56 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x3f000000}}}}}}, 0x0) 10:26:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x9effffff00000000}, 0x0) 10:26:56 executing program 2: r0 = syz_usb_connect_ath9k(0x3, 0xfffffffffffffd75, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0xffffffffffffff82, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, "7a8262bd"}) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4b, &(0x7f0000000080)=ANY=[@ANYBLOB="4b031a39daab400cc97f8ce188d02e8a2294f9df24ec968051debabfcf63438e2566000000000d6854ec1b38035a8f26abf825536ffcf3a54182c9139273f01e154267a6e7de71f9257ff80926a60193ad9f837c80ebf6e8c0"]}]}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xffffffffffffff9c, &(0x7f0000000040)=@conn_svc_rsp={0x0, 0x0, 0xa, "0712706e"}) 10:26:56 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r6 = dup(r5) sendfile(r6, r2, 0x0, 0x4000000000000081) 10:26:57 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8000000ffffffef, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:26:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x40000000}}}}}}, 0x0) 10:26:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xf0ffffff00000000}, 0x0) [ 739.401454][ T1265] usb 3-1: new high-speed USB device number 36 using dummy_hcd 10:26:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xffffff7f00000000}, 0x0) 10:26:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0x60000000}}}}}}, 0x0) 10:26:57 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r6 = dup(r5) sendfile(r6, r2, 0x0, 0x4000000000000081) [ 739.703494][ T1265] usb 3-1: too many configurations: 130, using maximum allowed: 8 10:26:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xffffffff00000000}, 0x0) 10:26:57 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0xfeffffff}}}}}}, 0x0) [ 739.831331][ T1265] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 739.839291][ T1265] usb 3-1: can't read configurations, error -22 [ 740.056097][ T1265] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 740.341530][ T1265] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 740.471025][ T1265] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 740.478982][ T1265] usb 3-1: can't read configurations, error -22 [ 740.492245][ T1265] usb usb3-port1: attempt power cycle [ 740.910756][ T1265] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 741.041355][ T1265] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 741.160986][ T1265] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 741.168952][ T1265] usb 3-1: can't read configurations, error -22 [ 741.330780][ T1265] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 741.461026][ T1265] usb 3-1: too many configurations: 130, using maximum allowed: 8 [ 741.580865][ T1265] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 741.589621][ T1265] usb 3-1: can't read configurations, error -22 [ 741.598385][ T1265] usb usb3-port1: unable to enumerate USB device 10:26:59 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r6 = dup(r5) sendfile(r6, r2, 0x0, 0x4000000000000081) 10:26:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:26:59 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x80, 0x2, 0x8f, 0x36, 0x5, 0x0, 0x9, 0x5815c, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000040)}, 0x300, 0x312c, 0x2, 0x0, 0xf, 0x7fff, 0x6, 0x0, 0xc1d, 0x0, 0x10001}, r1, 0x9, r0, 0xd) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) read$dsp(r2, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 10:26:59 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a, @rand_addr=0xfffffffe}}}}}}, 0x0) 10:26:59 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0xfffffffffffff000}, 0x0) 10:26:59 executing program 0: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r6 = dup(r5) sendfile(r6, r2, 0x0, 0x4000000000000081) [ 742.166297][ T4877] __nla_validate_parse: 40 callbacks suppressed [ 742.166318][ T4877] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.233162][ T4880] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. [ 742.256051][ T4885] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.292511][ T4886] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.3'. 10:27:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaae731d75ae5b9a4ebfa1c7aa5adc200000000000081000000080045000030000000000001907864010102ac1414aa0b00907805003c3f450000000000000000040000ac1414eff3eeee4c5601985a01609dc15a17b1f7b5356fec9d6d19f1d5319e4a0edb46828a99cbefe00edb16ee38a11bdd815e7043c5820161e444fcc74939e13add039d2d4f567c3000000000000000000000000000000009bfde6156d1f938883b56ad01e44f83128cd9994064c102573930a7e06f5ae72634683c94217ae9697cc9ffaa5994a2ebe55d97291ef1b007fbe75ba965ec68a96bb876b24a62abae425240e9b5fcf04b45837a5d89ecacf62216494310be072489c80fdb81bd49daec6b1988165ca848cd9727bed443e175cea92aea26ca0bcc65da47aa6d", @ANYRES16=r3, @ANYBLOB='@'], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @local, @void, {@canfd={0xd, {{0x3, 0x1}, 0x3a, 0x2, 0x0, 0x0, "3028d69dcb4454d78bf67bc27aa47914f7489bce20025b61af9892b68cb8917b455a4c7c48193a63538b02cc8f570380c4c538e7a39a3a5ea1af345b75eec110"}}}}, &(0x7f0000000080)={0x1, 0x3, [0xe9e, 0xb90, 0x6cc, 0x7f9]}) syz_emit_ethernet(0x6b, &(0x7f0000000180)={@local, @remote, @void, {@generic={0x8100, "23613b23d66f507f57c0a9e44b7d5dc17e251cee87379fac6a47b75ec8b6709fb28a8b636ffb652b0ad97e6b258cf22ce50e904936d7c940de80518cc043d1350bd23773f7bccdb5c4e3e9b0cdd8ca0184281948eeda1e19cedcd3aa60"}}}, &(0x7f0000000200)={0x1, 0x1, [0xa89, 0x3cf, 0xb99, 0xaf4]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$getflags(r4, 0x401) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="c4a17ee6f22e3e0f7914f766660f3881516cc744240075000000c7442402fba5aa34ff2c24c74424007db79444c744240250000000c7442406000000000f011c24480fc75a000f01cbc4616dfb19c744240002000000c744240201000000c7442406000000000f011424b805000000b93aa800000f01d9", 0x77}], 0x1, 0x2, &(0x7f0000000240)=[@vmwrite={0x8, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3, 0x0, 0x7}, @cr4], 0x2) 10:27:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x2}, 0x0) [ 742.556352][ T4894] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 742.662334][ T4904] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x3}, 0x0) 10:27:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:00 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001840)={{r1}, r3, 0x0, @unused=[0x15], @subvolid=0x8}) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r5 = dup(r4) sendfile(r5, r1, 0x0, 0x4000000000000081) [ 743.198068][ T4928] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 743.289368][ T4932] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:01 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r6 = dup(r5) sendfile(r6, r2, 0x0, 0x4000000000000081) 10:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x4}, 0x0) 10:27:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x8) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:27:01 executing program 1: syz_emit_ethernet(0xaa, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x640100fe, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @cipso={0x86, 0x4c, 0x2, [{0x1, 0xfffffffffffffe4c, "2636b5316523a9a28761"}, {0x0, 0x10, "e8854d230244dc5760f0150e803d"}, {0x1, 0x9, "72681a3c41152a"}, {0x1, 0x3, "f8"}, {0x7, 0x12, "1e41128a834378a5b21d9d1cc3f5ce8d"}, {0x0, 0xc, "4ca92f93418244f75f72"}]}, @ssrr={0x89, 0x17, 0x77, [@empty, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast]}]}}, "361f83fae4ff0000"}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @val={@void, {0x8100, 0x7}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @dev={0xfe, 0x80, '\x00', 0x14}, @random="367bcd8fc025", @mcast1}}}}, &(0x7f0000000080)={0x0, 0x3, [0x620, 0x7cf, 0x414, 0xd03]}) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000aaaaaaaa0800000d04000040250300006956dc58183792c037fae51caf059b8a96da65d702809ad8def5e65e5cb11743a49a076ad312afc0d85c7fdf89175965b7cd91d5bcefb6e2a502a258ed04209e"], 0x0) 10:27:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x6}, 0x0) 10:27:01 executing program 1: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000080)="883792e5081afec62db0215da859fb33574647a70ddbb1fcdd77a954e23eed87d9096bc851096870a216a881a773fe847e04e7277488bab0b5b3ea90e304fa5e56b58c36c185b0795b345271d594836b5bd8f5e9cccadff73db058245dced199db7b7c42ed04bb62d14ba0369a0c8e4142babc5439376337aac5321343", 0x7d}, 0x68) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000080045000030000000000001907864010102ac1414aa0b00907803003c3f450000000000000000040000ac14140a37e30000000000000000"], 0x0) [ 743.695370][ T4947] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 743.797724][ T4952] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x8}, 0x0) 10:27:01 executing program 4: perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x1, 0x401, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:27:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:01 executing program 1: openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80680, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:27:01 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001840)={{r1}, r3, 0x0, @unused=[0x15], @subvolid=0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = dup(0xffffffffffffffff) sendfile(r4, r1, 0x0, 0x4000000000000081) 10:27:02 executing program 2: r0 = syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001840)={{r2}, r4, 0x0, @unused=[0x15], @subvolid=0x8}) r5 = socket(0x2, 0x803, 0xff) mmap$IORING_OFF_CQ_RING(&(0x7f0000147000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x8000000) syz_io_uring_setup(0x1374, &(0x7f0000000140)={0x0, 0x14ed, 0x1, 0x3, 0x7f, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000), &(0x7f0000000080)) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r6 = dup(r5) sendfile(r6, r2, 0x0, 0x4000000000000081) 10:27:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x9}, 0x0) 10:27:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_emit_ethernet(0xa5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2, @ANYRESDEC, @ANYRESDEC=r3], 0x0) 10:27:02 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:27:02 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001840)={{r1}, r3, 0x0, @unused=[0x15], @subvolid=0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = dup(0xffffffffffffffff) sendfile(r4, r1, 0x0, 0x4000000000000081) 10:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xa}, 0x0) 10:27:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:02 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001840)={{r1}, r3, 0x0, @unused=[0x15], @subvolid=0x8}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r4 = dup(0xffffffffffffffff) sendfile(r4, r1, 0x0, 0x4000000000000081) 10:27:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xc}, 0x0) 10:27:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:02 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) r1 = gettid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0x80, 0x8, 0x2, 0x0, 0xfc4, 0x48800, 0xa, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xff, 0x4, @perf_bp={&(0x7f00000000c0), 0xc}, 0x44208, 0xffffffff, 0x77a, 0x0, 0x4, 0x101, 0x6, 0x0, 0x6, 0x0, 0xfffffffffffffffe}, r1, 0x6, r2, 0x1) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10003, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) clock_gettime(0x0, &(0x7f0000005380)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f00000004c0)=""/48, 0x30}, {&(0x7f0000000500)=""/45, 0x2d}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f00000005c0)=""/1, 0x1}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000680)=""/52, 0x34}], 0xa}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001900)=""/203, 0xcb}, {&(0x7f0000001a00)=""/73, 0x49}, {&(0x7f0000001a80)=""/82, 0x52}, {&(0x7f0000001b00)=""/160, 0xa0}, {&(0x7f0000001bc0)=""/20, 0x14}, {&(0x7f0000001c00)=""/242, 0xf2}, {&(0x7f0000001d00)=""/173, 0xad}, {&(0x7f0000001dc0)=""/171, 0xab}], 0x8, &(0x7f0000001f00)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000001f80), 0x6e, &(0x7f0000005200)=[{&(0x7f0000002000)=""/100, 0x64}, {&(0x7f0000002080)=""/124, 0x7c}, {&(0x7f0000002100)=""/38, 0x26}, {&(0x7f0000002140)=""/26, 0x1a}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/96, 0x60}, {&(0x7f0000004200)=""/4096, 0x1000}], 0x8, &(0x7f0000005280)=[@cred={{0x1c}}], 0x20}}], 0x3, 0x12102, &(0x7f00000053c0)={r4, r5+10000000}) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000001c0)=0x3) 10:27:03 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:27:03 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) 10:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xe}, 0x0) 10:27:03 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffd33, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @random="8fece3f6e1b1", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @multicast2}}}}, &(0x7f00000000c0)={0x1, 0x1, [0xdeb, 0x16d, 0x70b, 0x3a7]}) 10:27:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xf}, 0x0) 10:27:03 executing program 1: socket$bt_cmtp(0x1f, 0x3, 0x5) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[], 0x0) 10:27:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x10}, 0x0) 10:27:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYRES16, @ANYRESHEX], 0x0) 10:27:04 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$dsp(r1, &(0x7f00000000c0)=""/236, 0xec) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r2, 0x0) preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 10:27:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:04 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x800000800000001) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) 10:27:04 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_getmulticast={0x14, 0x3a, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x60}, 0x0) 10:27:04 executing program 1: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x5d}, @val={0x8}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d4c4cd10e99ce9b7e262e1e1ce385392cd29589a1598a3ba"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9f3b094453872bfa58774bbc8e556348d66bcd37d2a2bcbf"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x100}, 0x4000) syz_emit_ethernet(0x42, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaa8aa0000000000008100000008004500003000000000000190f864017803003c3f18eb654b45adfaf100040000ac14140a000000006c8d8aca9b8b93812635ec6ae8515a3995cb4e5341eedcea0e2dc3ab2e7078d117236f63ae98702981d7112a48c8357ba63d83b69c004729b669e5b6c7b555a314a53b8930a70549c747eed7f34aefcd6ee0dccf37ec327901ac9217a43b948c014f9eba11ca28e22a2c9794125dc2f120790e39c97e3df3d42a00000000000000000000000000004ca8c2c9b4a8ec8ecdc1968112fa9aa6d79017448e28a4a08ad0f228aba46f9f3f09e62f01edb722da94626611bcde"], 0x0) 10:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xf0}, 0x0) 10:27:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:04 executing program 1: clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{r0, r1+10000000}}, &(0x7f00000000c0)) syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000008004800007c000000000001907864010100640101020007c9dd2e8f16071f10ac1414bb00000000ac1e01010a0101006401010100000000ffffffff94040100441452730000000000000000ac1414bb0000000c830b1dffffffffac1414aa0000000b00907803003c3f4500000000000000000400007f00000100000000"], 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000200)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@llc={0x4, {@snap={0xaa, 0xab, "de", "6a6cd3", 0x8100, "ab645c6660aa6e56be223dd360e268d128f79d221b0de5e054"}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x365, 0x565, 0x3a6, 0xdf9]}) syz_emit_ethernet(0x49, &(0x7f0000000240)={@remote, @random="e8d1f5ee40fd", @void, {@llc={0x4, {@snap={0x1, 0x1, "99", "db3e9b", 0x1b, "2874f7de8f7f6587341e93be1de9aa450bcd3997699073615bd6ab66357b8198d6b6694e974060cab637253b5d36fc8bc4e706"}}}}}, &(0x7f0000000100)={0x0, 0x2, [0x3a7, 0x76, 0xd19, 0x65a]}) 10:27:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x196}, 0x0) 10:27:04 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, r0, 0x0, 0x0, 0x0, 0x0, r1, 0x0], 0x8}) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000000080045000030000000000001905864010102ac1414aa0b00907803003c3f450000000000000000040000ac14140a00000000"], 0x0) 10:27:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) [ 746.854131][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.860620][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 10:27:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x40, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xc0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xe1100, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe98, 0x4, @perf_bp={&(0x7f00000000c0)}, 0x80100, 0x3ff, 0x5, 0xa, 0x8, 0x80000000, 0x1, 0x0, 0x7, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) 10:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x300}, 0x0) 10:27:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000810000000800450000300000000000019078a0855373c3c02b7a0b00907803003c3f450000000000000000040000ac14140a00000000"], 0x0) 10:27:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:05 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) 10:27:05 executing program 2: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x800000800000001) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) [ 747.510150][ T5120] __nla_validate_parse: 20 callbacks suppressed [ 747.510169][ T5120] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 747.666407][ T5130] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x600}, 0x0) 10:27:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000000080045000030000000000001907864010102ac1414aa0b00907803403c3f450000000000000000040000ac14140a00000000"], 0x0) syz_emit_ethernet(0x1012, &(0x7f0000000080)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@generic={0x6007, "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"}}}, &(0x7f00000010c0)={0x0, 0x2, [0x5b, 0x901, 0x609, 0x701]}) 10:27:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}}, 0x0) 10:27:05 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x401) write$dsp(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ath10k_core', 0x800, 0x1) ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000100)=0xff) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) [ 748.025530][ T5139] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x900}, 0x0) 10:27:05 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @loopback}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x6, 0x3f3c, {0x5, 0x4, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) [ 748.122518][ T5142] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0xf}}, 0x0) 10:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xa00}, 0x0) 10:27:06 executing program 1: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x8, 0x9, 0x4, 0x10000, 0x0, {r0, r1/1000+10000}, {0x5, 0x0, 0x3, 0x5, 0x1f, 0x7f, "0f81cfd9"}, 0x3, 0x5, @offset=0x1, 0x5, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) 10:27:06 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r2 = dup(r1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000000081) 10:27:06 executing program 2: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) 10:27:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x10}}, 0x0) 10:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xc00}, 0x0) 10:27:06 executing program 1: ioctl$KVM_CAP_HYPERV_DIRECT_TLBFLUSH(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0) 10:27:06 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xb}}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x20, 0x8, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000040), 0xe}, 0x44401, 0x8, 0x6, 0x2, 0x800, 0x5, 0x20, 0x0, 0x0, 0x0, 0x56}, 0xffffffffffffffff, 0x6, r0, 0x2) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r1, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) 10:27:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x23}}, 0x0) 10:27:06 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r2 = dup(r1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000000081) 10:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xe00}, 0x0) 10:27:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0xf00}, 0x0) 10:27:06 executing program 1: syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081000000080045000030000000000001907864010102ac1414aa0b00907803003c3f450000000000000000040000ac14140a00000000df5b18a7b730588f4402b4a5428a22ff1809bb78660351c2d241836d6a152141073c3c57a98292265622d72297a3aafdda63e7f9614c56dc1d9c574692cb6f1b5a50b87941506cd88a92b6ea9c45ad6b7fcad8d8ef79314c6144c7b8d3956620fb1c19c39f142263762178"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@val={0x9100, 0x0, 0x1, 0x1}, {0x8100, 0x4, 0x0, 0x1}}, {@canfd={0xd, {{0x3, 0x0, 0x1}, 0xb, 0x2, 0x0, 0x0, "3921ef280f324ec00fc8d8bf324e48e8073c60b43fde3d91017383e7c645fff64ab8f57b8aa5fb3198bcaa40e936c08792ccaa2a4d594cda5d9e18888b433149"}}}}, &(0x7f0000000080)={0x0, 0x2, [0xcca, 0xbe, 0xa6a, 0x5f3]}) syz_emit_ethernet(0x1096, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @empty, @void, {@mpls_uc={0x8847, {[{0x6, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv4=@igmp={{0x1e, 0x4, 0x0, 0x7, 0x1080, 0x65, 0x0, 0x4, 0x2, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x5e, 0x3, [{0x7, 0x2}, {0x2, 0xb, "f4672050628ffba988"}, {0x7, 0x11, "508621b4ae7279a4efae1fdf56ce5c"}, {0x5, 0xa, "3ac5e35cdf1dc569"}, {0x6, 0xe, "04b93d9b96cda6ac14b64571"}, {0x1, 0x3, "99"}, {0x7, 0x12, "cc0e0ae3628e4fa9d1311cd7479d59f5"}, {0x7, 0x8, "39e2c05f84f6"}, {0x0, 0x5, "46e956"}]}, @generic={0x89, 0x5, "d1c8a6"}]}}, {0x16, 0x4, 0x0, @local, "752b96f5fae17be35e2c271cba6bae19b8419986686e0584f7e6ee930b40526ed71aa345d1ff484742a647aea6603a81e950d9f77702b097a99b544c9003618bab83581c7d418c1120a555d325389130dd202a1737469014857a52267fd498467261063d52e7f29097a1015447072b49a66c04c9467198804411c1775a6920d81d46e96263dc7a0f8268d83aff2a99d40bc0b6acbdb1b3856fdbef88e4b2b230034eac4e34dc6e55d618d684c22dd7ed8cf61d04baef380c114a4882cdb24aef28e8bc73ee42c060baff4e4d5dfffcca9a8072de4808615b12d7fb139bfcab37ffc4d9cfc50444ae31473e05c3ef4e43a0c0ed2dbaf8d023b241018e02ffd5634b4316c476e16f2afc666a2eb46b281490ae876eac4031203aa0242204d8fad5c1de20cf1b298a1474f0a011b74db0f38daa2546e930225a0bcc0c5587f26c67577f5e0cead029abacb8082927542a33d6c6209b7ed9147506f362b74129347b21a72e62fc03d5f323584221802d0e6646b5681da180cdda3b9c129d091fa9a4dbca4aa73dd5aba7ee7d065c8670b8a7f449184ea13638cc30ef9791e7133419ab1c8687807a95bf9982af3ef86b6d2e1ff67c68d27f73f17c47c8bfa5e5c68891e8e892e6767ce657d0b23a3d20476a7125dd24933ea44f5b6488c5adecc466cbcdd1f900fdb7d4d5b6c6aa337b527a934979f793e2e4dde9f72a9ae5e1b4b80cbedb697b1a5ed5ddf0dd975ca9abe91990b4d249594422a8760019765d90eca03b7b967890a3c070e372563edb1f972fb7c60fcc88a9d972add260713c446072e90e315c10760cb0d04bbc1c56ba023a294705fb88693add824f08cbae439f5f6dbb1b7cfabd73a12e101d22ef43ecbcbb2e97d00288ccda11ec4e62d29be681e9fa3a1de9c81080824ab8fe44a192f4b4c2c2aaee6d544242c9975fe8fb632b4d6596902e47597286c3bdca78431239d633becd118f1b3aeca82f1290b1df8f2533ce4fc40f0a937d9b10c6d12f6df596b12f047ff6c0f718480da45df864b05a8841000d4e27b8339e88f047c1cf2682798eabb38326afc43faa5de5ac56c84098aed40138bbf5bf7bedc8bdce40ae29c29558b426701f2673ab4aa798d4d2d603a3140abafe22f7c35d1873272b6c131ac39edaebb5976cf70d53e9121e5c08868b131136db21b0b3954fbf7fe4206017c8292c34294eb15f4ebcf2b9054551edbde66bb265a148b10374f3c2d44ee7db685bae1bf813c65015f51cc505cbdd8a49c05b16fcbd7a22a49b12c52890a62fe36a4043d3dc8dd8d2ab6aabf81253c0ac92d499190d4a6bf1eb891cd2294ce8e470a4a34e4dd43d04e7fff465b9683830c2a304b2737c0d285d21f6f895f842d54f1d9f4ba6a51ba53070750a383f3eef05af26e43dfe75cf7d5c05edaec9a92a7739da7e1650c5859c24606decad09fa0941731ca95f023716ca14cb4d45a96a2d47f2b502be7f20d28f46602997bba80bd49a7e41d261b0cb911109fab0fb97e1b9591563aabd704addd9f2f83e0c1ac055afc06b5e162b88a664a668d5ff196ef7ee20d24b4a987604778ba2fcc992e3870212192b49bbf767dcd396fa2336172b8d5bdca162286005e0630fc97d54f8ff6e8cdc851c8ef015b4f4bc91ec57d26a3488aa90db93e0e07237119ed78bf4e14cf4a4284af529666ce6215a58bb34fc0e779c5c5336a02e297b3fe56764df2e18447c5ef160f42aebb121e7ff09324a6fdfc360ca6ffbf80777e2903260bf172e20cef15e19e9d10369befa01e8de720468260795d4b879bf303a13603958be934c04d90d8ffedf3699431f6bd70b985cae08518f15c8c8a9a4f08014f82f3d5286339ecf46f101fc3bf6dbc6bf280194919689e0050ec4f6c26482f1fca42fe012490132adb80bacff7471ccb8ce437c5f85aa08731134fc2de70083d31aa6b3e4df4d391356454526b56591224609f821398cd693638f3caeaa999d3840d12aaf529fff7a9b88304c76298d1c2fe3b406f8d3936f78033411fd421d0069094555395e262a535fc49398286700b8290a9aa6037706e7e26cb2370f173f26e762b0c04e60c72a620277631a4dc313fa262b0bcc73e77db92fb78eac31c06449472d5ae5046682c021971d12749ca003eb0aada6c4098395c915bd7fa794bc778c12b392f9805ed44be97c22f8d1defb0ce12042ddf58ef245ef027c502e7a104ad02b167aec36bec03f9c33566416ce88f92c4e44ffb6670c347a35cbcb6f4ee6d28f0c595e6213b2a48b0eac68357faef6620e87cfd1187898ac7e6cd5f9426025be88e21f3d25ff4972906bb11b0d5cb5a25f6e0ba29ca66fbd710e9cf7e18839f39a3da2257499365fa5307ff19ae78d5a0f104958757a298b82434e72dea41f640fff1c15dcaa9de6fd5c8bf8572918a183f79c2fcaeb678f61bb4a88ba3b23c6f0bf6f6ec3b602ac5b452f6ab4433e522276c1cd0ac51241e06f46c2828702b1275b64fd32aeec497b04032a99d2f1bd3579e447f5f83336f59e687decf79033f79ced70f07beb6f153adc90cbef296f06c999af874f8acfe487d7fff640893f12a2d1207aa366d701868378eaef0d30f68675e53e35a3cfcf93157c44ee56ea8a672dd0b9d0ca2f7c1da93d73b60cda25e111d72244ecb8ec470427c9cbb3d0709d85ae08b2bcb81855776e55f068774e9daae7e7c9f0ca86899bee6d948f5471a5600d9ed79d4a8331369e8c731fc3d4a04c661c36feb950a1d5afd2ac308e8dbdc8550475ef9b573b1192ee3d29ca6d8210511209919e6ad07732ab3b0966da974de274f0a1cd2084025480dc74b09c8322feaa72609c4a938600946396de519d1249fe573c3bcefc9e2976897fd64597d3683243ab2e667c6d0c70ef0b50e360cc440b88905c9df5569288879e94abfd84cfdca2b3fa875561c4f27caf77cfcef3fcb2ffb3a51da79bd225224b56b3fa208b5031321308c1ebccbf174af3355d083606d653b5436b3418684f9cfdae94ebc39acf8e4ad610da21ca866a9fd3a53fe5230bc10fb0bd260034aaecf5ad652c78f4f8b4390946cf87b9261c7ff23ad469a827662320ea9f697766c0dd98715bc719d352d2154ea084845f032b1c32025f19c0c20c66b9d7545dc80f3e155c8fe1ce9d226d072d3453f214fcb1ad8cc036515c7c22091cec858e61de68d4e639ea88e3ae12dbbd7ce4dcbad00fee3fa99798e1d206cdc98521e721bea6ef9bf588c428e2bf7f1c6e7dce96ee8ed661adb012cf29a88bf275c53588918f47808f97307317f218e87e11ceac4d8e541a6b4886df4f0e40b6bf150731ced2ee909bfdc2c4409315636a1d5927d473b117f7523a3c7bae170bec859fb1d57f6d19a4fd2e3a0c4853ace9210ff88393999b04dc3f853fa484b2a1a610f3f570686d55c735aedba59788bc1d40bdeafe987f85a61c5bcfb6c08cbfba77c75712056820129f4bf635b73566e458cd514a45c6421598e402ceefbf8c143b9139280c2e0924a40578ae546be0a12010997fdc9b0b97938b553bc37e9b8a445b8c4b4f5774a800412703aba50b59191eb6500d35f3d8c1262e3143115c0857fc7da4b03aa6c5cd969b23a8a37858ce17b04b63b7f1fafdb3c339fa91ae5dbbf8615b11e6b3c0baa46e9479032521003eee6c2695630488d14038771a3dffee435cea11771916bbe77b99a2c6b754799d101f6f01da9a55fe000f90b48de1a6d9fe190a857f2a95e66be12b84185c75aa01b8df395eb085bf96aa3eaa3f72a8ad8c2e911d6be17ff27fc6f9e6769422c06ac43f5b6907c7e854f84d325ae2408c149df9b80bd6d84f6ed877ab597fd2c1ba8c700d9e27e8f2003aa1eb4ece33f5cb00df3089dce5262ed9dfcae0569aa5300dce4c142d306515296c7a6b154c0c0646e50814ff9048c55f81930655b060da7f8523c01ccf666548ed4b0f82c0dafb4ec168fc0dac14f84480e496e1675a279ad6b299bf868fa201dc7ff7d521dd56c6a7f299c0972021cb672ee5a072b8aa0ee8d21d041c37c678b06688b482dfa6c253607fece836e41cf6f3fe1ab9be524a2abb0eb1f78ded496328e79f763743ffbb64899ec237bd7f2bff315b779467d47bb83692fabf8ef6d3a0494de4063949396fd18e249db1ae92bcbc0d1ef63ce148fd65f2c0ce00bf7db9fb7ec5f0935955db592bcb087c695bb750b30914ffc5b5f10b451253fe85e36430f830a74028a6140acd61f53b53e78b0d5dc7b688649be30dc86224cab38b8070f14a8f16987a231349db0b0badb12898acd2360b9fc66baf315a5ffe85eb404d7d1c0873dfe7a6365f67c59c1c7e542f675011244014037e95f1aee3e8030df8d272a18233c8e0d73ec5ff3ef76cbd2117e6ba5d3262b28a2d4bed5be44a03b929fcff03f9665c7a1e45443a721dbbbfa2d2382fb3f8463941121668272e52fc561636620284d080dc4892b095ecdc80b5b72683a6b7ad5f87518571b710da5ded53d8f079bb2e78f136685308f9f9c14a8cd37360de9c74596064d629c9cfbbaa507ae14e58611321d93c68a386340d751bd510025a2f75af29cb170d1de898f78c082e094b351ba02b7d35290afcc0a5a33260206104c5908df89f7afe26fdb50b54e41a8207c48cbbe2ebc399021592b2b55455f4e32bdb322f0459df0c0ad838e6d40458d1418880c838763045bf1f3ed694e3ec86cd1f5267003e08cc23635d1b1103719ee063bb2088c2b2e4639378a3ae507fdc0d08a4da28aa71d8d26d24ed01423b76b21a75104cdc7850586a8ad67e891d27784984ab8c28bd2c3e807ccd87f11cf454e5550a5be80bc43464b03dd039b51e8f066beb948d15e4b2a1930ded2a99506df6a77351d9e6f57bcfa5fde7d84bd8329528fce0046e81ad432a3396c6c05e895c904481cc1cc8ea7568a2c50b0967120baec685cccb6ed483ac5fd5cc67e3cd37e6e74b420c4f44108cf4dca9c281c81660ba7309c95349a5acdc7c99903393e92d3fa63236ba331bac47352c17e8f9845abca2687d9480da82450eaa304e0ff7e3af985f1130c014ec38ac8af6631653db7e4d1cda613ef0c77fff3bf8f7542f148ebbe7c9152aeb19e680ade77e67428886d3134322d6ad238e3b28749326e814b087dad30a85a5a42f8cc7aeeaa70c7a7395381dc5ce7472feb5652f5487e00f21c70a7ded948e91a00e9cf59a89459438f25ff50497a605327199198d5d5405aae2014a36fb985bf0404fdd237db8e302579cdc9f1f77cfa8f74e35c5f678d9626ffec02e247f7c59e68e0df99f9b73f86baf1f181e00abcba54adb8a435b9e5e5c71a84c248baa30068c79c66a1fbd589f5b1d693c98e97c6e98d83a72fe7eb4c36d028a9ed678203c5b36048cf34e03687002f26483968d958e8e2b09d2c1c35f289d8a0a9cb0934868d9a5fd39c3fabcb648aa274d1d1a42f7c0110442d111a757189b07e12328a0603fbd87e127b408b90ec6cb353ffe0002b5ab0a2224734a6c1658b4886377e4300c9f6e5918180967e6dde2bd8c7834e499ef7228d4b2eac67ddde50d4b07e1a2ecfc73da47105fd0d6a050f1a9a3a47f3ad5fe45651cfba44359970f49b383f0762695012f2e5453d91da420855c337bc58f3ef3c930dfcfec350aa94d4d321475ad0f7b24658a2c2afeaea04c034b038261dff4a6cee17774537cce3d7c045b696b90af4632ec71555aedb798985a9fdce6bd11920e3185519839e295d155b9710bcf9afb5fb831efafcec8090ee6fdb9c0611d37cfd0"}}}}}}, &(0x7f0000001340)={0x0, 0x1, [0x503, 0x48c, 0x38d, 0x4b4]}) syz_emit_ethernet(0xed, &(0x7f0000000180)={@broadcast, @local, @val={@val={0x9100, 0x6, 0x0, 0x3}, {0x8100, 0x3}}, {@ipv4={0x800, @generic={{0x6, 0x4, 0x1, 0x1a, 0xd7, 0x65, 0x0, 0x0, 0x3f, 0x0, @remote, @loopback, {[@end]}}, "ded1f8cfc78c54e69f73eaabaa468e44311c7c487cd4062d7c853b7c564dd0d2c350b42175bbe6347cfa5777af48ab6ac9ca8f60b7267fd9dd154641b1f8e0cce12feebfaa106ed156ecbafc6b58aaca824e0e9483ad43f2ad3a808c625538581d6b868ea2395cd7b74650a55741f8fbe71e8e27a726df3594c01c0ff0f9b92323416fa01ed20aa2a35e2211c489650ed94c0b2dd6960e32f25827fb150f6dd5dbc427d24a1a9d42625bd3e8f5d2bc616d03fbeaf1c90e37e5cc8e630ed2c7"}}}}, 0x0) 10:27:06 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r2 = dup(r1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x4000000000000081) 10:27:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x2c0}}, 0x0) [ 749.444031][ T5203] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 749.466317][ T5204] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:07 executing program 2: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000340)={{}, 0x0, 0x4, @unused=[0xde3f, 0x9, 0x8, 0xb11c], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x800000800000001) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000014c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r2, 0x50009418, &(0x7f0000001840)={{r1}, r3, 0x0, @unused=[0x15], @subvolid=0x8}) r4 = socket(0x2, 0x803, 0xff) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r5 = dup(r4) sendfile(r5, r1, 0x0, 0x4000000000000081) 10:27:07 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x5) ioctl$SOUND_MIXER_READ_DEVMASK(r2, 0x80044dfe, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r0, &(0x7f0000000740)=""/114, 0x72) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 10:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x5865}, 0x0) 10:27:07 executing program 1: r0 = semget$private(0x0, 0x11e2a79421ee613a, 0x64) semtimedop(r0, &(0x7f0000000080)=[{0x1, 0x8, 0x800}, {0x0, 0x84a}, {0x1, 0x4}, {0x3, 0x0, 0x1000}, {0x4, 0x5, 0x3000}, {0x3, 0x400}, {0x3, 0x618, 0x800}, {0x0, 0x5, 0x800}], 0x8, &(0x7f00000000c0)={0x0, 0x989680}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @multicast2=0xac14140a}}}}}}, 0x0) 10:27:07 executing program 0: syz_io_uring_setup(0x184, &(0x7f00000002c0), &(0x7f0000148000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f00000000c0)=0x307e, 0x0, 0x4) open$dir(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000440)={{}, 0x0, 0x0, @unused=[0x17, 0x6, 0x8001, 0x800], @subvolid=0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/exe\x00', 0x0, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) r3 = dup(r2) sendfile(r3, r1, 0x0, 0x4000000000000081) 10:27:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0xec0}}, 0x0) [ 749.703485][ T5219] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x6000}, 0x0) 10:27:07 executing program 1: syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x3f3c, {0x5, 0x4, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}}}}}}, 0x0) syz_emit_ethernet(0x1fa, &(0x7f00000002c0)={@empty, @empty, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "468289", 0x1c0, 0x3a, 0xff, @mcast2, @local, {[@srh={0x3b, 0xc, 0x4, 0x6, 0x5, 0x28, 0x1, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @dev={0xfe, 0x80, '\x00', 0x16}, @private0, @dev={0xfe, 0x80, '\x00', 0x16}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}]}, @fragment={0x28, 0x0, 0x9, 0x0, 0x0, 0xf, 0x67}], @ndisc_ns={0x87, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, [{0x1, 0xe, "a5c3db0b7b8dd62ed42e98294ea0f2881d56119ba0ad648683c123714e4049299e1af818d8d7e17daefb21cd7b3ca6adb753925149773c8f744119a84ddbf4ea14d0f01b52ad481ae9bf12a78765d4503a5084024b3468185d9b2c95df2a9f3c3543fec661c876e77b3441ce50a3f1"}, {0x1f, 0x19, "359f7e55d3b5ff445d1d55230c7c53d52a9df21af6c0f7a6bbed685e1c39c473f47021f8af4388074da87503a3f20f6ded7f9b6a4c8946f3519d4f9c08ddcf3577d249e32b9e5c53b61937e4c5c1b4a7f1938b21b57c00a5204a8ee0be4d3eaa4806bed68cf5bb0e23d268449d3532c7b25d4d5351b6b10012d3b1e1185232f8621dc5e693f36295e758038f00895d0cf4cdeca36539b31f4381062f86e6b8d7a584762d38370c1e3fa24374e6f2625f9cb8f288203e4d5d95f3bc3b9184a6a22cebb59de2576dfcfb"}]}}}}}}, &(0x7f00000004c0)={0x1, 0x4, [0xe25, 0x56c, 0x675, 0xc43]}) syz_emit_ethernet(0x1e, &(0x7f0000000280)={@broadcast, @remote, @void, {@can={0xc, {{0x4, 0x1, 0x0, 0x1}, 0x7, 0x3, 0x0, 0x0, "08f94bbb88eb8a60"}}}}, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c200000effffffffffff000400fe8489dcd7d59a180c90273d7130131b433585a08c447dc8efc5ae7c0d544c7279a6dc54adc7014d68380000004230195c56bda195388ee4a80e889787770fb37b4e6df31f55d74c01a4f61af2421a262a909c2810e0bae74206"], 0x0) syz_emit_ethernet(0x10a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@llc_tr={0x11, {@llc={0xbc, 0xf8, "d59f", "5a79ac1b38b96985eb60c22f6a2ac626a397617568898e6d4d7f733509ae3caa4c64b0ef597abf2648a1e25b91975d3f553fd6422123b03148d228b44092f017b5686ea302d6dda6decbb470db549735042e45fed93ad6b695f80f1389c4af3e6e15273d9339164ca3a828543fc6643edf8a653fd92725a14834d388603572d87c2e231e46c166058b37cdb9c9117d242854277aa6cdd6da6c1894c28bcbbeba1a63b9b4c73aef4f53ecacc15f091f0a92c6ad81947f90b0460450f4d6eeae912cfc4a799ad2cd96fd3c9c27d9a7ba10d6a051406a3a3a105f86af1a6e387965485ed4dc43547b6b2b0176b048940fe86c2cb684ed634b52"}}}}}, &(0x7f0000000240)={0x1, 0x1, [0x101, 0xedc, 0x638, 0x557]}) [ 749.816902][ T5221] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. 10:27:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x33fe0}}, 0x0) 10:27:07 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51457, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x5456, &(0x7f0000000000)) syz_open_pts(r1, 0x202) ioctl$KDADDIO(r0, 0x400455c8, 0x2) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8000000ffffffff, 0xffffffffffffffff, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x42) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000007c0)=0x9) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$dsp(r2, &(0x7f0000000740)=""/114, 0x72) read$dsp(r2, &(0x7f00000000c0)=""/9, 0x9) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) 10:27:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r2], 0x1ec}, 0x1, 0x0, 0x6558}, 0x0) 10:27:07 executing program 1: ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, &(0x7f00000000c0)={0x81, 0x18, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0]}) [ 750.225797][ T5231] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 750.313675][ T5236] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.5'. [ 750.516565][ T8] Bluetooth: : Invalid header checksum [ 750.571159][ T8] Bluetooth: : Invalid header checksum [ 750.609430][ T8] ================================================================== [ 750.618052][ T8] BUG: KASAN: null-ptr-deref in __pm_runtime_resume+0x154/0x180 [ 750.625833][ T8] Write of size 4 at addr 0000000000000388 by task kworker/u4:0/8 [ 750.633646][ T8] [ 750.635979][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted 5.15.0-rc6-syzkaller #0 [ 750.644262][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.654332][ T8] Workqueue: events_unbound flush_to_ldisc [ 750.660228][ T8] Call Trace: [ 750.663521][ T8] dump_stack_lvl+0xcd/0x134 [ 750.668229][ T8] kasan_report.cold+0x66/0xdf [ 750.673042][ T8] ? __pm_runtime_resume+0x154/0x180 [ 750.678386][ T8] kasan_check_range+0x13d/0x180 [ 750.683402][ T8] __pm_runtime_resume+0x154/0x180 [ 750.688539][ T8] h5_recv+0x2c4/0x680 [ 750.692738][ T8] ? h5_slip_one_byte+0x150/0x150 [ 750.697800][ T8] hci_uart_tty_receive+0x24d/0x710 [ 750.703019][ T8] ? hci_uart_send_frame+0x6c0/0x6c0 [ 750.708313][ T8] tty_ldisc_receive_buf+0x14d/0x190 [ 750.713609][ T8] tty_port_default_receive_buf+0x6e/0xa0 [ 750.719336][ T8] flush_to_ldisc+0x20d/0x380 [ 750.724027][ T8] process_one_work+0x9bf/0x16b0 [ 750.729047][ T8] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 750.734441][ T8] ? rwlock_bug.part.0+0x90/0x90 [ 750.739380][ T8] ? _raw_spin_lock_irq+0x41/0x50 [ 750.744419][ T8] worker_thread+0x658/0x11f0 [ 750.749114][ T8] ? process_one_work+0x16b0/0x16b0 [ 750.754313][ T8] kthread+0x3e5/0x4d0 [ 750.758441][ T8] ? set_kthread_struct+0x130/0x130 [ 750.763656][ T8] ret_from_fork+0x1f/0x30 [ 750.768113][ T8] ================================================================== [ 750.776162][ T8] Disabling lock debugging due to kernel taint [ 750.834436][ T8] Kernel panic - not syncing: panic_on_warn set ... [ 750.841049][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Tainted: G B 5.15.0-rc6-syzkaller #0 [ 750.850691][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 750.860755][ T8] Workqueue: events_unbound flush_to_ldisc [ 750.866583][ T8] Call Trace: [ 750.869881][ T8] dump_stack_lvl+0xcd/0x134 [ 750.874483][ T8] panic+0x2b0/0x6dd [ 750.878425][ T8] ? __warn_printk+0xf3/0xf3 [ 750.883026][ T8] ? preempt_schedule_common+0x59/0xc0 [ 750.888500][ T8] ? __pm_runtime_resume+0x154/0x180 [ 750.893801][ T8] ? preempt_schedule_thunk+0x16/0x18 [ 750.899188][ T8] ? trace_hardirqs_on+0x38/0x1c0 [ 750.904312][ T8] ? trace_hardirqs_on+0x51/0x1c0 [ 750.909354][ T8] ? __pm_runtime_resume+0x154/0x180 [ 750.914694][ T8] ? __pm_runtime_resume+0x154/0x180 [ 750.919994][ T8] end_report.cold+0x63/0x6f [ 750.924604][ T8] kasan_report.cold+0x71/0xdf [ 750.929380][ T8] ? __pm_runtime_resume+0x154/0x180 [ 750.934684][ T8] kasan_check_range+0x13d/0x180 [ 750.939661][ T8] __pm_runtime_resume+0x154/0x180 [ 750.944791][ T8] h5_recv+0x2c4/0x680 [ 750.948877][ T8] ? h5_slip_one_byte+0x150/0x150 [ 750.953922][ T8] hci_uart_tty_receive+0x24d/0x710 [ 750.959134][ T8] ? hci_uart_send_frame+0x6c0/0x6c0 [ 750.964431][ T8] tty_ldisc_receive_buf+0x14d/0x190 [ 750.969724][ T8] tty_port_default_receive_buf+0x6e/0xa0 [ 750.975456][ T8] flush_to_ldisc+0x20d/0x380 [ 750.980148][ T8] process_one_work+0x9bf/0x16b0 [ 750.985130][ T8] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 750.990518][ T8] ? rwlock_bug.part.0+0x90/0x90 [ 750.995464][ T8] ? _raw_spin_lock_irq+0x41/0x50 [ 751.000505][ T8] worker_thread+0x658/0x11f0 [ 751.005194][ T8] ? process_one_work+0x16b0/0x16b0 [ 751.010403][ T8] kthread+0x3e5/0x4d0 [ 751.014483][ T8] ? set_kthread_struct+0x130/0x130 [ 751.019698][ T8] ret_from_fork+0x1f/0x30 [ 751.024371][ T8] Kernel Offset: disabled [ 751.028727][ T8] Rebooting in 86400 seconds..