2600c, &(0x7f0000000580)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r12, @ANYBLOB=',umask=00000000000000000000002,case_sensitive=yes,gid=', @ANYRESHEX=r6, @ANYBLOB=',uid=', @ANYRESHEX=r8, @ANYBLOB=',case_sensitive=no,subj_r\x00\x00\x00\x00pids.events\x00,func=POLICY_CHECK,\x00']) [ 1442.308417][ T9787] sp0: Synchronizing with TNC 03:57:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x3f00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:26 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:26 executing program 4: ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x5, 0x6, "04dc12", 0x0, 0xff}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400000, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000340)="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", &(0x7f0000001340)=""/4096}, 0x20) mmap$snddsp_status(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x110, r3, 0x82000000) rmdir(&(0x7f00000000c0)='./file0\x00') [ 1442.959505][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x4800}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x8925, &(0x7f0000000040)=0x8) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket(0x10, 0x80002, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000300)) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) fcntl$notify(r5, 0x402, 0x8) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88110000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="840000000d0600022cbd70ff0f683a6e65742c706f727400000005000100070000000500010007000000050001000700000005000500050000000500050000000000120003006269746d61703a69702c6d61630000000d0003006c6973743a736574000000000500010007000000050005000700"/132], 0x84}, 0x1, 0x0, 0x0, 0x8004}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000000)={0xccccccccccccd14, &(0x7f00000000c0)}) 03:57:26 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0xffffffffffffffe3) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x2000) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:26 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:26 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) socketpair(0xb, 0x6, 0x8a, &(0x7f0000000000)) rmdir(&(0x7f00000000c0)='./file0\x00') [ 1443.382260][T10031] sp0: Synchronizing with TNC 03:57:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x4c00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1443.744699][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x6800}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x30460, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) r5 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x101000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x2000) readahead(r5, 0x8, 0x30000000) ioctl$MON_IOCX_GETX(r8, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000), &(0x7f0000000380)=""/37, 0xfffffcb8}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCGPKT(r9, 0x80045438, &(0x7f0000000280)) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x5, 0x180) ioctl$TIOCSETD(r4, 0x8925, &(0x7f0000000040)) 03:57:27 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') close(0xffffffffffffffff) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x9) 03:57:27 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x8, 0x3, 0x5) [ 1444.337348][T10265] sp0: Synchronizing with TNC 03:57:27 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x8268) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote, 0xe23d}, 0x1c) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000000)=0x400000) 03:57:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x6c00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1444.496003][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r1, 0x4143, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x6, 0x0) 03:57:28 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:28 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)=""/251, 0x15a, 0xfb}, 0x20) eventfd2(0x8, 0x800) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x30051, r5, 0x2000) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f0000000400)={r8, 0x400000000000009d, &(0x7f0000000300)=[0x40000002, 0x8, 0x1], &(0x7f0000000340)=[0x0, 0xfffffffc], 0x30, 0x831aaabbfe9a4fa0, 0xfffffffa, &(0x7f0000000380)=[0x81, 0x2, 0x1, 0x1, 0x34cd, 0x4], &(0x7f00000003c0)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000400)={r8, &(0x7f0000000380)=""/14}) fsetxattr(r1, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)='cgroupselinux-\'\x00', 0x10, 0x3) 03:57:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x7400}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1445.025880][T10265] sp0: Synchronizing with TNC [ 1445.351148][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:28 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") connect$netrom(r1, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null]}, 0x48) prctl$PR_GET_DUMPABLE(0x3) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000080)='/dev/watch_queue\x00', 0x141002, 0x0) 03:57:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x7a00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0x200, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = dup(r0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xd) r5 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x2, 0x60000) fsetxattr(r5, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)='/dev/ion\x00', 0x9, 0x1) ioctl$TIOCSETD(r0, 0x8925, &(0x7f0000000040)) 03:57:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:29 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:29 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x18) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0xf000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:29 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c004500a, 0x0) ioctl$int_in(r1, 0x800000c0045002, &(0x7f00000000c0)) read$FUSE(r1, &(0x7f0000000380), 0x313) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x800, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000040)) [ 1446.181347][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x3, 0x37, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x2000) ioctl$VIDIOC_G_JPEGCOMP(r7, 0x808c563d, &(0x7f0000000180)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r0, 0x8925, &(0x7f0000000040)) 03:57:29 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x28800, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0x8d, "037746b4759a731ceb71de3c4f31e2b60479cc89afd45d571b49baa8f679f65e574635e6322f1eabdf3319820212ff644dd2e309ba7c98b05536c879b3a18ed67b8df438f279d730c6d265a2c8eb9424336452ad68aad48029d35ec61a3062a686fcaeba4b78fdffcd65ec53a3a9402c6a5fcfef6040d81c768026159a112964f0e48bf3761765c0c4c43f4643"}, &(0x7f0000000080)=0x95) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0xffffffff}, &(0x7f0000000200)=0x8) rmdir(&(0x7f00000000c0)='./file0\x00') [ 1446.499769][T10652] sp0: Synchronizing with TNC 03:57:30 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0xff0f}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1446.910626][T10652] sp0: Synchronizing with TNC [ 1447.037726][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0xffff}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:30 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x400, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:30 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0x3c) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @dev={[], 0x2}}, 0x10) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x200201, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r9 = dup(r8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x2000) ioctl$ASHMEM_SET_PROT_MASK(r9, 0x40087705, &(0x7f0000000180)={0x3f, 0xfffffffd}) r10 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x2000) ioctl$VT_WAITACTIVE(r10, 0x5607) r11 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x2000) write$vhci(r11, &(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 03:57:30 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) socket(0x0, 0x0, 0x0) 03:57:30 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r6 = accept$packet(r5, 0x0, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r6, &(0x7f00000000c0)={0x60000000}) ioctl$TIOCSETD(r0, 0x8925, &(0x7f0000000040)) 03:57:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:31 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000040)={{0x1b, 0x20, 0x4, 0x8, 0x5, 0x3f}, 0xcf}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0xfffffffa) 03:57:31 executing program 4: r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0xd0140, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @link_local}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r1) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="020004008feb2ef79c7fe8917d93e35d47ee41246f097c2e52ba3c971fda6d852de2f09fdcf80cda13cec2fb695959958903afeac65e6228bc4085fbd460c4d9d892bbd066a00f1989f590c272346aa50ea847c975cdf41705a137c841d870a4d2a6", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r6, 0x6}, 0x8) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ubi_ctrl\x00', 0x245000, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x8, 0xd, 0x0, r8}) r10 = dup(r9) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r10, 0x2000) ioctl$VIDIOC_G_DV_TIMINGS(r10, 0xc0845658, &(0x7f0000000200)={0x0, @reserved}) [ 1448.157242][T11007] sp0: Synchronizing with TNC 03:57:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x2}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:32 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:32 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @local}}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) ptrace$cont(0x20, r5, 0x4, 0x0) getpgrp(r1) dup(0xffffffffffffffff) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = socket(0x10, 0x80002, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000340)=0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000100)={r8}, &(0x7f00000001c0)=0x8) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$netrom_NETROM_T4(r9, 0x103, 0x6, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r12, 0x0, 0x6, &(0x7f0000000280)=').em1\x00', 0xffffffffffffffff}, 0x30) r13 = gettid() ptrace$setopts(0x4206, r13, 0x0, 0x0) tkill(r13, 0x3c) ptrace$cont(0x18, r13, 0x0, 0x0) ptrace$setregs(0xd, r13, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r13, 0x0, 0x0) tkill(r13, 0xb) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x1c, 0x0, @thr={&(0x7f0000000000)="9ac32c4a58b5b1fb09735204198fae56691bb72c342b1459969a15d1effd5260221489f354ba3c38367424e556eee71645f281bb658f0e0b8848ff47d35d25cd51291a4dd9bfcd9f1a42bc067b700a8b8db33619a6", &(0x7f0000000080)="97e273e38f50987d2ba62654e45dc0f1ce91b7e8d5192fbc79ef07b1186c9e636865a7bdc670a2e40287751c9e86f5"}}, &(0x7f0000000140)=0x0) timer_getoverrun(r1) 03:57:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x3}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:32 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x2000) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r11, 0x40184152, &(0x7f0000001200)={0x0, &(0x7f0000000100), 0x4}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12880}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x7ff}]}, 0x28}}, 0x4000018) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001280)={'team0\x00', r6}) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x94}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], r12, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r13, 0x111, 0x1, 0x7db, 0x4) ioctl$TIOCSETD(r0, 0x8925, &(0x7f0000000040)) 03:57:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000800)={"0ce832d1fa43c43cb0711b8335905d420398920c31020d49ad504ffb0f0e936c5ed739a43a0f78c08e804400e427afb3aa050702b97b359dd967b1b6340c02cabccaeabb97dc6d063645295e08ecfcf231c9a296576b687db62e0571eafd208325539b81fc1885937ce6a2f0585e72f744709c53a0527d23c46969f8f5fd7785d3d4cd38beb8ba7327e0c4fc0d86fcd4ed65cef3fd4dc3369f8def3214a61daa19cbe66adaea938e848f79fb929c27bfb5f2dd41c4dbd69592aa00fe24e304bcaa9f4fd246ab2e65cdab1e52a21a62027dbd526bc7ba78f505d6364749279ab465673a4b803194ac325ccb024c53d6c19454e8706d94d63af6159bbb479fa35252483660f3c5baf798e38befee58ad7b470c4bd112b1fe38f6b2bbd956175ef7f7fdc80f89a325f26251ada9c9351d5d6a90c53d3884961150a9ab303e4e690b6f9d617eb63bfb2e3f12be7b38c3be93bd180071f61333c4a7243bb64a3d9fa7ad6bb1c9940658efed19dd2c2a362b8296c6cd406b4b11041fd6c0dbe1c8b54c9352051511f7f5e5922a37a5c4d3643020e7d01dfb816fbd9467abc3cccfdac8ce8368302923ed282d6aa62928ff264ce51071e4cede9e42d10b38393aa27294b348349f33da4c33d59b67ff35c224f624f6edeb86573afef6b4aea0a64cc1148f111056285ebdc00ea5db59c3614ac5ea45b9889413327af8164954bfa483f6ca5f9e57463458c50d033067bef086d953aff44c19e603a4ebffb51215fb0e57a9c74bc7a43edc1bc498360339b6e1f5b8e6adce321835cb7092073666d0484b2ffeff7b81ba5fdf60685493efce5c80730fd00988ba616de4ee9b954d1699ca7bf0eafbb5bb4fe435c3a87046a780a3404077e2cca250053f3d14ec3bbea38959cf6b0850e40b9f8463d7a503917b5f519b54bf914794cf4d44e06cb1c79d20fa0ba367f96887a602bec6b4afc8c10c91711ac09c92a1a45632db912649834b9f81916dfd53721a2874fb9098ad99b7044f9bd5f2b1fd109c3f935dfdac48f7caf12eaca441cb61debab1bc26a321af795d050ea4eb945c4dfdd7efffe00b6391d1af937327a1b60a7211dcf1e76338e9a8a163331dcaeb700e01554bc2ad3078a2823af8474cd14f0a51572d78fe8b14fc3212821d34e2f1fbdf802ad46a465df2322e00c7c468273b9554893c92dd9f176e6d0f58f555f5fc249b329320aec8a970c4ce42b1fa506fdd89eefb91e0d7c6c1fdadb3f34697f19cfe87a59e77a109500186f195b356ede6dd21581c0d1a1f0da48ce7f55c48309415f36d9cebfdb2190bfb8c76d4e10bbf192f6f5a5a39fb7c997b2d2d2fca3d7410f14f706f77433bafc6f4818fbd345f06c752cc1a126dc2fdb80e5791f1e950dd594df92d090a65adcde897903bd3e4583061dc68de9a0f2a2d14fe60c98a7d7d8b016bef"}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:32 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000080)={0x200, 0x0, 0x3001, 0x6, 0x4, {0x7f, 0x5}}) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000100), &(0x7f00000001c0)=0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:32 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x8001, 0x8, 0x7}, 0x8) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x9, 0xa651b4acf9195c4b, 0x6) 03:57:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1449.742912][T11157] sp0: Synchronizing with TNC 03:57:33 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:33 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000040)={0x4, 0xfff, 0x400, r0, 0x0, &(0x7f0000000000)={0x990a97, 0x6, [], @value64=0x7}}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x4c54b577) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x5}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:33 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x3b, @multicast2, 0x4e22, 0x2, 'fo\x00', 0x49, 0x8, 0x47}, 0x2c) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000000)=0x8) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x4, 0x0) 03:57:34 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x0, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000080)={0x0, 0x9029, 0xc99, [], &(0x7f0000000000)=0x6}) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x4}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1450.817290][T11342] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 03:57:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x6}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1451.023649][T11342] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20002 03:57:34 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={{0x1, 0x0, @reserved="a11a629c60eccca1f8c502c3a8fc03f874f5409b09b00b5e7b6e073b257bc1ae"}}) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000000)={0x5, 0x1, 0xfff9}) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") recvfrom$l2tp6(r2, &(0x7f0000000040)=""/102, 0x66, 0x40, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x20) 03:57:34 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x1000, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0x40, @broadcast}) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000100)=0x68) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb8b, 0x9}, 0x844}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f80)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x3}, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x20011, r4, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x227e, &(0x7f0000001240)) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7c, &(0x7f000059aff8)={r8}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000240)=r8, 0x4) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 03:57:34 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x7}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='trusted.overlay.nlink\x00') rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) [ 1451.950491][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:35 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0xf507, 0x7, 0x9}) 03:57:35 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000100)={0x4, @capture={0x1000, 0x2, {0x6, 0x8}, 0x9, 0x9a}}) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xa}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:35 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:35 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:36 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0xf48, 0x4) recvmmsg(r0, &(0x7f0000000ac0), 0x8f, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{0xb7, 0x20}, 'port1\x00', 0xdd9830866a78ca8, 0x1db4fdbd5dc98752, 0x0, 0x40, 0x8, 0x7fffffff, 0xfffff001, 0x0, 0x7, 0x1}) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) 03:57:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x18}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1452.882593][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:36 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000100)={0x9, @capture={0x1000, 0x1, {0x8, 0x1000}, 0x20, 0x1f}}) 03:57:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000680)='/dev/bsg\x00', 0x0, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x4) socket(0x0, 0x0, 0x0) 03:57:36 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:36 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$alg(r2, 0x0, 0x0, 0x80400) userfaultfd(0x80800) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) pread64(r3, 0x0, 0x26, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x17f562976fb24d49}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x48}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1453.832108][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:57:37 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) fchdir(r0) creat(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4c}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:37 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r5) getresuid(&(0x7f0000001640), &(0x7f0000001680)=0x0, &(0x7f00000016c0)) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x2030108, &(0x7f0000001700)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id'}, 0x2c, {[{@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@obj_role={'obj_role', 0x3d, '},vboxnet0'}}, {@fsmagic={'fsmagic', 0x3d, 0x100}}, {@pcr={'pcr', 0x3d, 0x1f}}, {@subj_type={'subj_type'}}, {@seclabel='seclabel'}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_gt={'uid>', r6}}]}}) r7 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') recvmsg$can_j1939(r7, &(0x7f00000015c0)={&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)=""/66, 0x42}, {&(0x7f0000000500)=""/145, 0x91}], 0x2, &(0x7f00000005c0)=""/4096, 0x1000}, 0x120) setsockopt$inet_udp_encap(r8, 0x11, 0x64, &(0x7f0000001600)=0x2, 0x4) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000002100)=""/40) r10 = syz_genetlink_get_family_id$nl80211(0xfffffffffffffffe) r11 = socket(0xa, 0x3, 0x3) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r11, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x20, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r9, &(0x7f00000020c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002080)={&(0x7f0000001880)={0x7e8, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IE={0x7c7, 0x2a, "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"}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x2, 0x81}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x7e8}, 0x1, 0x0, 0x0, 0x1}, 0x8021) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000002140)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000100)={0x2056, [[0x8, 0x8, 0x0, 0x4, 0x9, 0x3f, 0x5, 0xff], [0x9, 0x2, 0x3, 0x7ff, 0x8000, 0x1, 0x1, 0x7], [0x4583, 0x6, 0x7fff, 0x9, 0x1, 0x3, 0x1, 0x9]], [], [{0x2, 0x9, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x1}, {0x9, 0x1}, {0x6, 0x22e44bef, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x0, 0x1}, {0x1, 0xdd, 0x1, 0x0, 0x0, 0x1}, {0xfffffffb, 0x5, 0x1}, {0x6, 0x20, 0x1}, {0x10000, 0x7, 0x1}, {0x3, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x1, 0x4000000, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x8000, 0x0, 0x0, 0x0, 0x1}], [], 0x1}) 03:57:38 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)={0x3, 'veth0_to_hsr\x00', {0x8}, 0x5}) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:39 executing program 5: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) getgroups(0x2, &(0x7f0000000100)=[0xee00, r1]) syz_mount_image$hfsplus(&(0x7f0000000140)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000c4ed44", @ANYRESHEX=r2, @ANYBLOB=',\x00']) 03:57:39 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000001c0)="264d35a224b7c18e15f39a5288703b9e47ed6aa63ccca13261b03c7a1e4796763c6c208c5341874dad74cf4f9bb22054bb458714f29763767ae3f4e2137977ce12ad081c9eb5815a053263880f2e5afad962595119e9ad342773e811032b6a0abef4808dde60eb1aaa2809faf4ab5627b0939c61ceef2b04aea1ad1d519dd298e414d2d45cd064a22f8ca8", 0x8b}, 0x68) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x16, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000000)=""/29) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x68}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:39 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x48}}, 0x0) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r10) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in=@empty, 0x4e23, 0x0, 0x4e23, 0x0, 0x8, 0x20, 0x30, 0x5c, r8, r10}, {0x1ff, 0x1, 0x7fffffff, 0x0, 0x3, 0x1, 0x2, 0x8}, {0x3, 0x9, 0x3f, 0x7}, 0x500000, 0x6e6bb8, 0x1, 0x0, 0x6, 0x2}, {{@in6=@mcast1, 0x4d4, 0xc3}, 0xa, @in6=@mcast1, 0x3505, 0x70447cc98db41e6a, 0x4901435534b9710e, 0x58, 0x0, 0xfffffffe, 0xdba4}}, 0xe8) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:39 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r4 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r8, r8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r9) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r13, 0x0) r14 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r15 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r15, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r15, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r8, r9, r12, r13, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r14, r15, 0x5}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={r3, r5, r9}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setresuid(0x0, r16, 0x0) ioctl$TCSETS(r1, 0x4b44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "521e712cac0934b6dbf444ef4fd368589c2bf0"}) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) r17 = socket(0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) accept4$alg(r17, 0x0, 0x0, 0x101000) [ 1456.015443][T12008] ip6gre0: Cannot use loopback or non-ethernet device as HSR slave. 03:57:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x6c}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1456.400230][T12054] hfsplus: unable to find HFS+ superblock 03:57:39 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x74}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:40 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xffb}}], 0x18}, 0x0) 03:57:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000000)={0x1, 0xffff, 0x80, 0x80, 0x2, 0x0, 0x1, 0x7, 0x1, 0x8, 0x20, 0x7}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r3) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:40 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000200)={{0x1, 0x9a9993da1673df6d, 0x2, 0x1, '\x00', 0x6}, 0x1, 0xa01b49dc3f9711cd, 0x7, r5, 0x9, 0x4, 'syz0\x00', &(0x7f0000000000)=['+\x00', 'em1-wlan0\\wlan1&\\\'\x00', 'user\x00', './cgroup/syz0\x00', 'em1/\x00', '+$ptrusted\x00', 'em0:]\x00', '\x00', 'wlan0eth0{)procwlan0lo%ppp0!{\x00'], 0x5d, [], [0x0, 0x1, 0x4, 0x7]}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000100)={@null=' \x00', 0x9}) 03:57:40 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:42 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x800}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) personality(0x5000004) 03:57:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x7a}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:42 executing program 5: syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x8000, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000280)={&(0x7f0000000080)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, &(0x7f0000000240)=[@init={0x18, 0x84, 0x0, {0xffb}}], 0x18}, 0x0) 03:57:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000040)={0x4, 0x9, 0x4, 0x40000, 0xa5, {r4, r5/1000+30000}, {0x4, 0x2, 0x2, 0x6, 0x1, 0x5, "96e4edc5"}, 0x81, 0x3, @userptr=0x7, 0xfffffff7, 0x0, 0xffffffffffffffff}) ioctl$CAPI_NCCI_GETUNIT(r6, 0x80044327, &(0x7f0000000100)=0x5) r7 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000200)="3373332daf617226f6f9a2e82550388639a55eb4f5db390133bcd7beb3a83dd99df20abf47a8eab4fd9ffa91", 0x2c, 0xfffffffffffffffc) r8 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r7, 0x3, r8) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:42 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000080)='./file0\x00') accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xf0f56b1e0ea2537c) socket(0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x701501, 0x0) ioctl$TIOCNXCL(r2, 0x540d) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x2000) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0xd, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x30051, r7, 0x5000) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000000)={0x3e, 0x2, 0x2b}) recvmsg$can_bcm(r5, &(0x7f00000026c0)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000400)=""/252, 0xfc}, {&(0x7f0000000500)=""/188, 0xbc}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000280)=""/25, 0x19}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/167, 0xa7}, {&(0x7f00000002c0)}], 0x7, &(0x7f0000002680)=""/31, 0x1f}, 0xe3) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r9, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) pwritev(r9, &(0x7f0000000140)=[{&(0x7f0000000100)="702f07af2e1e97ae9b036b27e58559ad68cb167e346cc0703de93d5ad4e0bd12bedece3150576b36d01feb4ee36b1fe0de1d5cf63ce91e37ee", 0x39}], 0x1, 0x401) connect$unix(r8, &(0x7f0000002700)=@file={0x0, './file0\x00'}, 0x6e) r10 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20882, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f0000002780)=ANY=[@ANYBLOB="8200000004bdc74140789a275f755222f7780e25af2ce3c58d4d236aa5ca89a354c3830730bae4a02e91632cc600640e2e75f3b3b5db37075c48592d398cd1b35128a64c19680dd2d4fa60e2cc8f4247e70f524571df6d77cd76195827456709d9fa71e58ea341830d01010f22b4d60fecb42f5c20b1f30cb72295d084956542ee9a1989258e7c747a129ae1316eed93aa5133b6a701f55cbe39a6005d9c71646b92fa21120d63c82e9ff9e7ca27023d9fd22863f1046c6a294538438fee8cb274d6712449e38911d972175a983267fac3bf8ba45fab3e6aba3b7421fee684bd75450fa4076f914acfd36f0d3d83a2ef67"]) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00000002c0)) 03:57:42 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xf0}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1459.184071][T12366] Unknown ioctl 1074048651 03:57:42 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:42 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = dup(0xffffffffffffffff) write$P9_RSYMLINK(r1, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x0, 0x3, 0x401}}, 0x14) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:42 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0xb4, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0x21}, 0x2}, @in6={0xa, 0x4e21, 0x7ff, @dev={0xfe, 0x80, [], 0x2c}, 0xfffffed1}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e23, 0x6, @remote}, @in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e23, @multicast1}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e21, 0xfffffff0, @empty, 0x3}}, 0x80, 0x47}, 0x90) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000280)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000c80}, 0x40) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x208480, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4008}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x68, r4, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1ff}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x26}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xed4081e9f790ac72}, 0x4c00) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x70, r5, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5f80}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x880) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r1, &(0x7f0000000700)=0x4) pipe(&(0x7f0000000740)={0xffffffffffffffff}) write$input_event(r6, &(0x7f0000000780)={{}, 0x1f, 0x1, 0xfff}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000880)='/eth0.-\x00'}, 0x30) perf_event_open(&(0x7f0000000800)={0x2, 0x70, 0x7, 0x0, 0xfc, 0x0, 0x0, 0xfffffffffffffff8, 0x10, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6c, 0x2, @perf_bp={&(0x7f00000007c0), 0x10}, 0x2000, 0x5, 0x8, 0x8, 0x7, 0x6}, r7, 0xa, 0xffffffffffffffff, 0x716690d21f423c23) r8 = syz_open_dev$vcsa(&(0x7f0000000900)='/dev/vcsa#\x00', 0x10001, 0x40880) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x98, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff9}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xebea}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x2e3ddaa702559c92) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000b80)={0x9f0000, 0xfffffffc, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0xa30a7e, 0x4, [], @p_u8=&(0x7f0000000b00)=0xf7}}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000bc0)={0x1f, 0x0, 0x3, 0x1}) ioctl$DRM_IOCTL_AGP_FREE(r10, 0x40206435, &(0x7f0000000c00)={0x58dd, r11, 0x10001, 0x7}) r12 = fsopen(&(0x7f0000000c40)='reiserfs\x00', 0x1) r13 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/snapshot\x00', 0x100, 0x0) fsconfig$FSCONFIG_SET_FD(r12, 0x5, &(0x7f0000000c80)=':vmnet1\'bdev/\x00', 0x0, r13) r14 = openat$full(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/full\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r14, 0x2402, 0x81) r15 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsu\x00', 0x101000, 0x0) write$P9_RVERSION(r15, &(0x7f0000000d80)={0x13, 0x65, 0xffff, 0x8000, 0x6, '9P2000'}, 0x13) r16 = dup(0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r16, &(0x7f0000001100)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000018}, 0xc, &(0x7f00000010c0)={&(0x7f0000000e00)={0x2a8, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x130, 0xc, [{0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33b2}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd01e}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b7a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59164749}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x254bf57c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e91}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ffc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a141cc8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2095340f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7314ca27}]}, {0x44, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb84}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8f17}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x526ec157}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x198ec6db}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd892}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e46}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x71d358ef}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5cf35a1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x192f292f}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe21b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb9ce}]}, {0x3c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf3fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x448c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74ea51d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50d49ecc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd6a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x203e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2915}]}, {0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22218f7c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d4ff485}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0xf}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x3c, 0xc, [{0x14, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x49168787}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25e57c00}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62feb1d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5fa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c9c8dba}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x68, 0x8, [{0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x24875233}]}, {0x3c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x775e962d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52a0aea4}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bcac0cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0xb28ed2fb6d9d8435}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x8000000000000003}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8040}, 0x4) 03:57:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x300}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x500}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) write$fb(r3, &(0x7f0000000000)="aeb8ae584672d94787d14cef657a381f23c4c74a69e44484eda0e01ceb9d2f860a0b4126c98ee644bb241790c8e9b0f682a15ea6445597c91a4f36e34b", 0x3d) 03:57:43 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r9}]}}}]}, 0x48}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000010600000000dfff000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800120008000100687372001c00020008000200", @ANYRES32=r14, @ANYBLOB="050003000000000008000100", @ANYRES32=r17, @ANYBLOB], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) r19 = socket(0x10, 0x80002, 0x0) ioctl(r19, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_IPV6_IPSEC_POLICY(r19, 0x29, 0x22, &(0x7f0000000e40)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000f40)=0xe8) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001540)=""/20, 0x14}, {&(0x7f0000001580)=""/86, 0x56}], 0x2, &(0x7f0000001640)=""/127, 0x7f}, 0x30004) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002b80)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000002c80)=0xe8) r23 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r25 = dup(r24) getpeername$packet(r25, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = dup(r27) getpeername$packet(r28, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r23, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r26}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r29}]}}}]}, 0x48}}, 0x0) r30 = socket(0x10, 0x80002, 0x0) ioctl(r30, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept4$packet(r30, &(0x7f0000002cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d00)=0x14, 0x80800) r32 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r34 = dup(r33) getpeername$packet(r34, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = dup(r36) getpeername$packet(r37, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r32, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r35}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r38}]}}}]}, 0x48}}, 0x0) r39 = socket(0x10, 0x80002, 0x0) ioctl(r39, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r40 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x8, 0xa0000) getsockopt$inet_IP_IPSEC_POLICY(r40, 0x0, 0x10, &(0x7f0000002ec0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f0000002fc0)=0xcd) r42 = socket(0x10, 0x80002, 0x0) ioctl(r42, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_mreq(r42, 0x29, 0x15, &(0x7f0000003680)={@rand_addr, 0x0}, &(0x7f00000036c0)=0x14) r44 = socket(0x10, 0x80002, 0x0) ioctl(r44, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_IPV6_XFRM_POLICY(r13, 0x29, 0x23, &(0x7f0000003880)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@empty}}, &(0x7f0000003980)=0xfffffffffffffeba) r46 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r48 = dup(r47) getpeername$packet(r48, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r51 = dup(r50) getpeername$packet(r51, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r46, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r49}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r52}]}}}]}, 0x48}}, 0x0) r53 = socket(0x10, 0x80002, 0x0) ioctl(r53, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getpeername$packet(r53, &(0x7f0000003d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003d80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000043c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000004380)={&(0x7f0000000400)={0x5d0, r2, 0xe63b08213a095953, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r9}, {0x130, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r14}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r18}, {0x78, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r20}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r29}}}]}}, {{0x8, 0x1, r21}, {0xc0, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r26}}}]}}, {{0x8, 0x1, r31}, {0x1cc, 0x2, [{0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r38}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r41}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x99}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xd24}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r43}, {0x160, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r45}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r52}}}, {0x3c, 0x1, @enabled={{{0x4e, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r54}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}]}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x8000}, 0x10) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:43 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x78, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3086e8f849f5b2952744", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400", @ANYRES32=r2, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) [ 1459.898022][T12713] ip6gre0: Cannot use loopback or non-ethernet device as HSR slave. 03:57:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x600}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:43 executing program 5: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r2}, 0x0) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$isdn(0x22, 0x3, 0x23) ppoll(&(0x7f0000000200)=[{r4, 0x80}], 0x1, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x11, 0x0, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x5452, &(0x7f0000000040)) fcntl$getownex(r5, 0x10, &(0x7f0000000580)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000", @ANYRES32, @ANYBLOB="c011495234c4d427b42cbf53861fa755d8189504c2db9a1f3092f5da818405f3a871fd741cc9220d1fd0d737abd879e3092d9a8ec7652c238da5163d301949dcab1f9f5deb9f31c7a4a5e271b0382bfb2a9e3eb8a427ae818d62768686106f7a407921a79f462d992b3adafd4abfb8472b1dcc704577c9f892cfd816d552026422ef4ac66f1f007d8873c25ed04d40853786ee6fa928b672484408b558e1f7ad3cd9fd6f80269fd9f7a17b85aaf2fb786043ee31496b7e703ac2d62b92d65e9d22fa507c5c31565233c9a699", @ANYBLOB="4eb3321f7dfe2876af7b93", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESDEC], 0x7, 0x0) r6 = socket(0xa, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) gettid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r7) r8 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) ioctl$SG_GET_REQUEST_TABLE(r8, 0x227d, &(0x7f0000000780)) kcmp(r7, 0x0, 0x0, 0xffffffffffffffff, r8) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x4, 0x2, 0x100, 0xaae}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r9}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r9}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r9}, 0x30) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x807}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r11 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r12 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) pwritev(r12, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r11, 0x4c00, r12) sendfile(r10, r11, 0x0, 0x102000004) 03:57:43 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') [ 1460.082815][T12793] device dummy0 entered promiscuous mode [ 1460.139712][T12793] vcan0: Cannot use loopback or non-ethernet device as HSR slave. 03:57:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x700}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1460.279238][T12793] device dummy0 left promiscuous mode 03:57:44 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = msgget(0x0, 0x8) msgctl$IPC_RMID(r3, 0x0) msgctl$MSG_STAT(r3, 0xb, &(0x7f00000001c0)=""/4096) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20100, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) 03:57:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) sched_rr_get_interval(r2, &(0x7f0000000100)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) write$P9_RWALK(r3, &(0x7f0000000040)={0x16, 0x6f, 0x2, {0x1, [{0x0, 0x4, 0x5}]}}, 0x16) fchdir(r0) rmdir(&(0x7f0000000080)='./file0\x00') 03:57:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xa00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x21, 0x0, 0x0) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x6, &(0x7f00000014c0)=[{&(0x7f0000000100)="1b41e10ed9cd1fce05076f9572b624bf7de441d66b30bef0a681e321e0427f709d896511f1aac7d82a35f3fa470a906f4cece286d64cde6c1ee7577daba9affa4c26ddcc5381a60b621be88af0a30c3020ed7ffd74b745d4bff524a886b72b7bdda06bd7b4f0d5ebc0001efac02850e05b4e51621b6f5809138661837ec6f30900489a0923a750f8e1c7", 0x8a, 0x5}, {&(0x7f0000000400)="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", 0x1000, 0x7}, {&(0x7f00000001c0)="af3abe15f60a4fc6b99c0b3dae58b0e1225fe9348fbeff37bd81dd0fe9275a77d80d36d8e04a83685bcc3c4480948353a6e66f610c1dc5167b58857870499262de603d86cb6847b49f732069b273ab200f79b538b47d65ffcbedcdd7e4f8f685b71c3f87a4521e0576a714f2647a0655e0cec53ac0bf2ff850b6839eaecf22477cede57187ea5a684df5435729caec7bb226890eec689289", 0x98, 0x6}, {&(0x7f0000000280)="4c7caf84042e5aed87f1aecaf8e8a4fae176be1d06979ccc0dbd1cadbfe1d977e718ed966923c4204cbf55d7b15422cfd1cf590f2bd7695fb8f92193a874b770e61f035b726d59a706d8aaa474aa55c6e6aef5da6e3f3c28c5eb13a21f6e8578c0b912e2b1e9ab798c7ecfe2d42d2dfabb2fbda8d6e5f703dc7d17e50521892ff183539e4b4729d154f3e06b30b8b2b250cee2b9dde7529bfdf8", 0x9a, 0x6}, {&(0x7f0000001400)="3750651419701c0340badd2e704eafcc0904d805b917dae745a82e54349c825ac68593922986b7ba1e34a329ba8aa4ee729bf976611b192b2d7080dfd230799b222898d762e1d4d375c64fd31c7efbaeaac28baa4f0f17929e7a139ab36ffe552b847c6ccb6cb3be9cf0abe40f54a878658bfe9a303f76d5a199cad2512067e589e0bdfb6771f370029c4206ef549eaa7e77a62268d32756d60d64c1436e70b8d95ceb4ed6979219be4e913b2108", 0xae, 0x10001}, {&(0x7f0000000080)="54cda7d146f312f2860dad5defbe4fdf708601f5d16c4fad99df1d3be0547ea043db1be5026a13617248566bbb41af4716", 0x31, 0x6}], 0x3000060, &(0x7f0000000340)={[{@jdev={'jdev', 0x3d, './file0'}}], [{@permit_directio='permit_directio'}]}) 03:57:44 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) rmdir(&(0x7f00000000c0)='./file1\x00') lsetxattr$security_evm(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=@ng={0x4, 0x14, "b45af5b57310632a719f7ee840"}, 0xf, 0x5cd549624abecf5c) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x50000, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xd2800084}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, 0x2, 0x1, 0x1442, 0x70bd2b, 0x25dfdbfb, {0x5, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x60, 0xe, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x3}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) 03:57:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x1800}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:44 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:44 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) socket(0x26, 0x2, 0x6) 03:57:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x2000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:44 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x1650d690, 0x46b01) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") fchdir(r3) r4 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000100)={0x1, @pix={0x3e, 0x9, 0x39565559, 0x5, 0x8, 0x7fffffff, 0x9, 0x4, 0x1, 0x8, 0x1, 0x4}}) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000280)={0x6, 'ip6tnl0\x00', {0x5}, 0x7ff}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x204c020}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r7, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000000}, 0x1) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x3, 0x2) 03:57:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x3f00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:44 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, 0x0, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:44 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000340)='[\'eth1-#\x00', 0xffffffffffffffff) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000680)="62f23e748cdfecc0d3bcb88248f9f8f8e8ba030000000000001dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a30142ee9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffd92, 0xb6}], 0x80000, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r2, r2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r7 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r8) r9 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r10) setresuid(0xffffffffffffffff, r10, r2) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r11, 0x0) r12 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r13 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r13, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r13, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r2, r3, r6, r11, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r12, r13, 0x5}) r14 = socket(0x1, 0xa, 0x20) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r15) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000001600)=0xe8) syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f0000000340)='./file0\x00', 0x6, 0x3, &(0x7f0000001480)=[{&(0x7f0000000380)="4439d7a388ad1cfff2be2393a2d8bac4f2aec1154daae878328e6c32795fea683cde4dbacef04e98a6e62998780c", 0x2e, 0x7}, {&(0x7f00000003c0)="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", 0x1000, 0xc000000000000000}, {&(0x7f00000013c0)="d468901bebd21deb903091b74cd53f62cdb37365dd370686b08db7eb3bf36cee73ff682056ed96cd26860dcaf0cb25b885ce5c9d5184c019f00ebd3eee04089e642eae8b10416e54595cbd4b179846dfec8dc295acb78fe52ea221c7a2e6214365148d27616c4eb46afb47c7c69b93559263fd5005b268aa61577af34b09fefedb75890a3ccf362678b49c52ee310f867789888b27f6d8198f7778543231235d2c15c02069be83c82c375a94729fdebb86", 0xb1, 0x949e}], 0x400, &(0x7f0000001640)={[{@errors_continue='errors=continue'}, {@utf8='utf8'}, {@show_sys_files_yes='show_sys_files=yes'}, {@fmask={'fmask'}}, {@gid={'gid', 0x3d, r3}}], [{@euid_eq={'euid', 0x3d, r15}}, {@euid_lt={'euid<', r16}}, {@obj_user={'obj_user', 0x3d, '+]'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000300)={'macvlan0\x00', 0x0}) r20 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r20, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r22 = dup(r21) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r22, 0x2000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) r24 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r25 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r25, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xd3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=r25, @ANYRESOCT=r24, @ANYRES32], &(0x7f00000002c0)='syzkaller\x00', 0xa8f, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x4}, 0x8, 0x10, 0x0}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="1807f4ffffffffff95000000000000001800000000000000000000000600000000015e1e1da36ff8145e0020d1050000"], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0xbf, &(0x7f0000000480)=""/191, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x6}, 0x10, r23, r25}, 0x78) r26 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r23, 0xfffffffffffffeb1) fsconfig$FSCONFIG_SET_FD(r22, 0x5, &(0x7f0000000080)='macvlan0\x00', 0x0, r26) sendmsg$nl_route(r18, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="6a91000000000000907dfeac1775bc4ffaffffff972437dce1db4b470f8ffdea363d3f206a4c3556a07db5a74a83a23c948a71904fb619be7b8a9c37b7ee0074c8b395d3cd56a71c00634a63d34af2d1bf63084acb49c2483a79f7c94c793b535a64fb51c5883ecb20a25e6d86f4800a2e6ea15af264837e979891cf5dd42963d33fb8de2660b7e8653b696d03fa493d88daa9f02df476c0f11603f97f446fac20de767fe4bdee78bd9f6fee06000000000000a228b4ac39be4bac39250468e5eb66aa5ee4cd39936f52c801bf5588252063f75a5c856545255947bc32606c1a05c077a7158b", @ANYRES32=r19, @ANYBLOB="000000000000000004002b0062ff270000000000"], 0x2c}}, 0x0) r27 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r27, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r29 = dup(r28) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r29, 0x2000) ioctl$RTC_WKALM_SET(r29, 0x4028700f, &(0x7f0000000100)={0x0, 0x0, {0x37, 0x32, 0x12, 0x11, 0x5, 0x9, 0x4, 0xfe, 0xffffffffffffffff}}) 03:57:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4800}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1461.726124][T13293] ntfs: (device loop5): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 1461.759837][T13293] ntfs: (device loop5): parse_options(): Unrecognized mount option euid. 03:57:45 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") [ 1461.776150][T13293] ntfs: (device loop5): parse_options(): Unrecognized mount option euid<00000000000000000000. [ 1461.799158][T13293] ntfs: (device loop5): parse_options(): Unrecognized mount option obj_user. [ 1461.824017][T13293] ntfs: (device loop5): parse_options(): Unrecognized mount option . 03:57:45 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000540)='/dev/input/mouse#\x00', 0x6, 0x400) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000580), 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fchdir(r4) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4c00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:45 executing program 5: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2b, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x24000014) close(r1) 03:57:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x6800}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:45 executing program 5: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@dax='dax'}]}) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = creat(&(0x7f0000000080)='./file0\x00', 0x10) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r1, 0x80184153, &(0x7f00000002c0)={0x0, &(0x7f0000000140)=[&(0x7f00000000c0)="36435c82b504528acebaf567d4d81afcf7ee0455a6004c1b93d598a31a0aeb825c2628af671f2892682670dc5e69f1cfc980e2a24749871fe8393000039c0a380c2df25aba387f4e6431a9dd60e45b51e65ceb834fe83f1e20a07eac84e68adc7d963f39396d7b8e52d40fb00e84df8c3d797d604542c3c2e883", &(0x7f0000000200)="122a435df2b20c9a51479bba14d563f3518bd705b2ab845bfdbfb4cfe661efdc62f303409f396f4a1c9795127c0e1ddabf39bd75547a5b67744fdda84ffa74b02580f50b14b8da61750f521f306c8922812fb937c06356781c31bcca7e5cfbea42be52b28777495ab842c59418bbd918ddce92b825c7aecfc356e0ca903f6de19766a099"]}) 03:57:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x2000) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r9 = dup(r8) r10 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x2, 0x64d00) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000240)={0x80, 0xc1, 0x1, 'queue1\x00', 0x7fff}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r9, 0x2000) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r6, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r11, 0x8}}, 0x10) 03:57:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x6c00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:45 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x4a, 0x42, 0xff, "efba99b326baa8db95fa55978d6c18af3ae7096ea0c2f66470913a4b7e3b8901ff458c91d59ef5f3961823596e5d43e9f0b8a13f323a19146637a27e2b528cac7bd9325fa44bb299fd93"}) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) 03:57:45 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) getpid() r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000000040)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) r6 = syz_open_dev$vcsu(&(0x7f0000000100)='/dev/vcsu#\x00', 0xb73a, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r5, &(0x7f00000001c0)={0xffffffffffffffff, r6, 0x8}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 1462.531827][T13690] Unknown ioctl 1 03:57:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x7400}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:46 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x7a00}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:46 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x2000) ioctl$DRM_IOCTL_SET_UNIQUE(r6, 0x40106410, &(0x7f0000000080)={0x4c, &(0x7f0000000100)="51918ee0d29fdca4954905fbd42a1a84019e3ac1195a0c757d25569c1ba7e0d9bcff6a96571feabedb218fb840a0a6057a77a352a8858eeb3a5a46aae1c50851d176cbb1e680589e5a39913f"}) r7 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000180)=@usbdevfs_driver={0x5, 0x2, &(0x7f0000000200)="b70e401944bfa90ea82404d83aec184d9168df315bd09c69677401a530a97bc4c2ebf698deeaec8c44d8b27ad05cf481a93fae47aab59f0a8cf5468fdf35e7877493b086470dea6068cec14405b43c89cd66c8d54815d4e25a8d8c0cf052e424180539dbc3aefa1b6933997e6ceb25c3f2214267c94b5574156798af166350753c8078ed281935bba635e88d22747a5489080e5b5d896a7eef428b8533b92ec33d93d620103495cb742fc4f27c80c8d80e29b12284d530f449cbb1ce4cf07e5a4973b888b0efa0a0dc15c2"}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01000100aaaaaa030020"]) accept$alg(r6, 0x0, 0x0) socket(0x0, 0x0, 0x0) [ 1462.660619][T13689] XFS (loop5): Invalid superblock magic number 03:57:46 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e1e, 0x4, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x10000, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000000680)={0x7e, "5a4e61afa2b45fa3cd36d2793c00611fc2a41ba3e26ab37e8a3810c8de4499fe8242bb85185ca1528ff5cdb22f467504895688242368f2cdea2d3910797192d01b81b734c8fd45318a0fef2714dd9df4eedfb03f1c6ab509cfb8a501bf1b3ec834566fb20d1aca862f2a381d500448ea737d60a42d3358b2addfb3bf6fea11bc"}) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1b) 03:57:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000380)={0x7, 0x8, [0x5, 0x8000]}) rmdir(&(0x7f00000000c0)='./file0\x00') syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000040)='./file0\x00', 0xbcce, 0x7, &(0x7f0000000580)=[{&(0x7f0000000100)="df37eda03bdb20b4669e1e855652d09c977dd35efa92ef3ee013ef7515b5c93191a55d0d4780630819a5800f09bc786dd43f88dc71289becf07465290ccafc90e34d4d7c97df523bebb575c1848dc0eb2929cdced96bbaec996a98be73d2ceb0b3b60b2f89de87e3be65718f4ff493c7ce0c12824ca9bd62846253f47ff9ae7b1cbfb0c880732128c05151d3104b45eacc3d0381180a75409e09daf1711f96d8b45ac63cb61f7eaf29b469e8b6", 0xad, 0x400}, {&(0x7f00000001c0)="476dc861ae7f22a327ca6f628cda9ee4f604a44ab537a4c107126a86c5ea83c520109d837b85452fe6ddf09cb264d85f69549fe7ab98e0ec419c7b3dc6127d0a305996a08c10d2addd87b46e6a05fe54d964a0b5c2bbbb9c3ed5922d6b4c9fa34178644f78fe2acb893bda8fa97aad55152c9be98566d643ddc52657574b06ca9f57c549ce0fad091cf2707286137d83b44dd41519a00f8895270f70d0f49f98a7bc5b02", 0xa4, 0x200}, {&(0x7f0000000080)="0940f8336104d317bc19f8124a3b7e3351cad1d75b1a013d5e9a970d293f0eee1b88a38250a1f83c34f3f58c35a4c2", 0x2f, 0x6}, {&(0x7f0000000280)="cda4100ff65875d365114107ff845c0ab702e7c217e0419401edf11e1e68c1", 0x1f, 0xfffffffffffffff9}, {&(0x7f00000002c0)="d1a34e5dfbe4cd429b17f48807fe983689f10303189f3df2dbdeaa9e0e54522300110c252b1b2fb194fe43cbf71f53289b57e4e73682f54e72e9c89215258a6fd248cadc6465624dffcec80bad3a6bd095ecb1f444a0934fce8a03a4607fb14fced9c183b34d963c0f7dda991c90306d31bbd52a634e4275fabd326ae58714f4a7d22353ae901956c85bed147583", 0x8e, 0x1}, {&(0x7f0000000400)="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", 0xff, 0x4}, {&(0x7f0000000500)="bfc2530ae27aab1c9fc8d90b9f3f486b422564a1c8a2ca49b0ae1138b15dd379b26d59eb1e21b659847fb15cd3fefa5b20704fa750fb48e3914571849f3ad0aabe5038057454efdb69e3f8716488dfa631d1941795e052e6dd504921c0e863126fcf995eecfacdab74e4e023", 0x6c, 0x6}], 0x1010424, 0x0) 03:57:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xf000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:46 executing program 3: accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @default, @default, @null, @default, @netrom, @remote, @default]}, &(0x7f0000000080)=0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket(0x0, 0x0, 0xfe) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x640080}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd4, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x101}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xd4}}, 0x8840) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000100), 0x4) 03:57:46 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7c, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={r6, 0x8, 0xffffff7e, 0x400, 0xea3c, 0x37, 0x2, 0x5, {r10, @in={{0x2, 0x4e20, @loopback}}, 0x5e90, 0x2, 0x200, 0x4, 0x6}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r11, 0x9, 0x2, [0x800, 0x3ff]}, 0xc) 03:57:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xff0f}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000380)={0x3, @default, r3}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000000)) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept4$nfc_llcp(r5, &(0x7f00000003c0), &(0x7f00000002c0)=0x60, 0x80000) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="011000000000000018001200f3fe0100736974000c000200060012004e23000008000a00", @ANYRES32=r6, @ANYBLOB="0800250004000000"], 0x48}}, 0x0) 03:57:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x200000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:47 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000007f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) pipe2(0x0, 0x0) socket(0x0, 0x80000, 0xf0) r1 = socket(0x0, 0x3, 0x0) bind$rds(r1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00f174", @ANYRES16=r5, @ANYBLOB="080027bd7000fddbdf250e00000008000600fd3a0000"], 0x1c}}, 0x40008) 03:57:47 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @remote}}, 0x1e) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xf0ffff}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:47 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22, 0x8, @rand_addr="b2010000002621b7002000"}, 0x1c) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, @phonet={0x23, 0x3, 0x4}, @phonet={0x23, 0x4d, 0x3, 0x3}, @hci={0x1f, 0xffffffffffffffff, 0x3}, 0x701, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)='veth1_to_bond\x00', 0x4, 0x80000001, 0xac27}) syncfs(r3) 03:57:47 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getpeername$netrom(r1, &(0x7f0000000000)={{0x3, @default}, [@rose, @bcast, @bcast, @netrom, @null, @null, @null, @rose]}, &(0x7f0000000080)=0x48) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r5, &(0x7f0000000140)=0x4) 03:57:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x1000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = epoll_create1(0x40000) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000000), &(0x7f0000000040)="31089c1ce897e49d7447910c5bab6ba717de55a17bcc170f7a3551439ffabdf39b4dcc6f64d5734f7f3be6975b309983431348d68be82a8eda539419b2"}, 0x20) 03:57:47 executing program 3: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@ipv4, @in6=@remote}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000000)=0x5a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) rmdir(&(0x7f00000000c0)='./file0\x00') socket(0x8c8bd3b50a7d436a, 0x6, 0x80) 03:57:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x2000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:47 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x79, 0xfffffd99}]}, 0x10) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f0f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x4, 0x210004) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000000c0)=0x5, 0x2) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x100000) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000200)="4072b4a0a41fc59d9b7060d3d00968b591124f7422a770b6719e616f2eacc48b21271398e499ed3fed45649e5bffc293a90555a7ba450c5f2c306e34a220e3ab0298443c6f7c8ce6152106d0a2ac0c78e916d752c7b91df1b9a68f577bcc0d55dd80d1cc6c5e1d50d3194868810f23c631ee33bc295788ea35d7f31afbd0") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f0000000040)={0x6, 0x7}) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x1) write$vhci(r5, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 03:57:48 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000007f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) close(0xffffffffffffffff) pipe2(0x0, 0x0) socket(0x0, 0x80000, 0xf0) r1 = socket(0x0, 0x3, 0x0) bind$rds(r1, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00f174", @ANYRES16=r5, @ANYBLOB="080027bd7000fddbdf250e00000008000600fd3a0000"], 0x1c}}, 0x40008) 03:57:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x3000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x10000, 0x0) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000080)) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000040)={0x5ab5508a53db3b75, 0x0, [0x85, 0x0, 0x8, 0x4, 0x0, 0x81, 0x3, 0x3]}) io_setup(0x87e3, &(0x7f0000000100)=0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x42000, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x2000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000001540)={0x0, 0x80000, r1}) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000001840)={0x980000, 0x335, 0xc3e, r9, 0x0, &(0x7f0000001800)={0x990a66, 0xffffcedd, [], @string=&(0x7f00000017c0)}}) r11 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000018c0)='/dev/video36\x00', 0x2, 0x0) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r13 = socket(0x10, 0x80002, 0x0) ioctl(r13, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/hwrng\x00', 0x2bdc354c804c415b, 0x0) io_submit(r2, 0x9, &(0x7f0000001bc0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x401, r0, &(0x7f0000000400)="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", 0x1000, 0xeb, 0x0, 0x2, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f0000000240)="1252e77f1daf1647168080606adfa00ad94712b4643174152f033a809a56c315bc3cc5f8ffd980a4891682090c23d67df02c788e0bfa5e648b63d60025101aa3d31930ab58e7c066bfdd1583968504a29bab373c79051582b5ce47b68ba20d79af69cc41bfec28e30564d29582a54084bef30ada30220d29c00e6583114809aa9ee181", 0x83, 0x42, 0x0, 0x6, r1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x2a6, r4, &(0x7f0000000340)="e702e4a029e275cfa5da25596db17a58eedf4aad03821400b5", 0x19, 0x4, 0x0, 0x0, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x3, 0x55, r1, &(0x7f0000001400)="00638a5c6b967d3f1af38652e3ab53c529b85abbb896edd054958c9ebc053601b98749950dabe887e3d1a12c00579e1f74ea99dfa0df520bb87e336fabdf3d20e3a5071d9efeaa2096492e50cda8e514d2f9e7563b87fb67dda0dbe081b6af27860d8bb5e77b87010c89258c29fe9f697ebcad4fafcda9a7273dad99c06c24ad7eca9345cb070c9d9858bc6997a06244fb314460324829e7d59405f9177badfad243896805a7b95b41d5be22bf151ecb8a12d0c84e1102654361f43938c8b9b6688d4696156a21111bce78f6956f9b3821e7b7d9f1fc2395c774cfe1d706bb", 0xdf, 0xf, 0x0, 0x2, r7}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x5, 0xfc01, r8, &(0x7f0000001580)="e3c714ac0b09f98c06b7e9830ec0e5dc5ea92001de3aec997ad9e906abbeb155b7ab86c8843752979e56f201ef3bfad10a2af2264ce8b7e1b3909368661a4cff020b7ff90ee5c3349b59ce40b1ec5293d3b4025d678f9d60c04c1550034a3faae0b3789db734a48299d332b76bd8c8ef211b5b0d571efa6470267fcd83eabaa3f335ab0f9f93c3b22b07dd6eea104b0fd7818cd2ab15aef76ac0c869ee59fc6ea03e5b1c89bf798cbf0084cff7571ca60bec25b4c7c73f437206984e6fb60483ac98d7e4e58c8e6c434bfcc246331e223161040c77e7be0dc605889f3112530df1fedd1740f33fbbed0787204e23945552406cbedd", 0xf5, 0x401, 0x0, 0x2}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f00000016c0)="591d2d4b2cca73832dede3c3fac6478794900da21c376518c30f559d9a2dfbd05c6c9452c0834135ba27e5e30d11a1cd56f0b41817e3b6a7b993abaadea7c2cda0a9d4db4470e27c4f68bbb970feb0ab94ff4764dc12a9cedc0348f720f892e49227fdd0ed13567028adaff2b433f4b4ff20628cec387a1e91bf42be6919c1978c79a7d5d446b097399c907c72244b3aea6deaf826c8741c4bbf1ef88391c5d40073eca0948e366c3e92b159ed0485569b9f51c872dee01895c8ba7dc70f61531faefb17c89700f36b3954a400c30bb9b47e4d45", 0xd4, 0x100000001, 0x0, 0x0, r10}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x3ff, r11, &(0x7f0000001980)="dc64d6b69bf6b5cbe12deb74afe1d69f3c1e5331fe711ff51cc6bf4a6d394db14e0ca6df53dbb10ee4caabe678013c23e37515882d142de9d1dcbbca2bacba1223fbd03ff0b9e12b914241a1", 0x4c, 0xdca3, 0x0, 0x1840aaeb9b327c32}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x81, r12, &(0x7f0000001a00)="4c6f333070ff825f09388231daf6dc9f48c3c09c0b28f256ab0e5003804304f870483d93e3450d581427a1ea6b419d60865e1c7da4727cbf142d8229eefd03e5c1af15175e2f7b6613b65f1a640a1db0060ebe5d8664d1e3e0", 0x59, 0x1000, 0x0, 0x3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x9, r13, &(0x7f0000001ac0)="639a1b53160bda7d43dffd844d3df28f46c3aa8a51e07316b80072e91e52e24d3266d3bb4ab37153b91a2650166e7d147a233ed06eee316c1556b4262e5c9a717a8fdf47a238832a7714", 0x4a, 0x8000, 0x0, 0x0, r14}]) r15 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r15, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r15, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r15, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) fchdir(r15) rmdir(&(0x7f00000000c0)='./file0\x00') 03:57:48 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:48 executing program 3: pipe2$9p(0x0, 0x1c00) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) unshare(0x8020000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x403, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) close(r1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb4, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e24, 0x3, @dev, 0x400}, @in6={0xa, 0x4e22, 0x10, @rand_addr="8f11612601b1a859b237f56f0505eee7", 0x7fffffff}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e20, 0x1, @local, 0x7}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000240)={r3, 0xffffffff}, &(0x7f0000000280)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0) setns(r0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvme-fabrics\x00', 0x4400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000300)={0x3f, 0x3, 'client1\x00', 0x1, "f86c54f26fe90613", "334a1ff222ee5b192f5e2e6fa59ef6b87fa9d7b5ed68869f0dbea6cd013ba03b", 0x6702, 0x7}) r5 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000ffa000/0x1000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000480)=""/4096) 03:57:48 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_cache\x00') syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x8a, &(0x7f00000005c0)={0x80000}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="c5300dd10137f4895afa1dd55000", @ANYRES16=r5, @ANYBLOB="31000000000000000000090000003c0003000800030000000000140002006c6f000000000000000000000000000014000600ff0200000000000000000000000000010800010001000000"], 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40484}, 0x800) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x120223}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x90, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x15}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1465.166436][ T27] audit: type=1800 audit(1578715068.604:311): pid=14731 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 03:57:48 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r5, 0x3ff}, &(0x7f0000000080)=0x8) 03:57:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x5000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:48 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) lseek(r2, 0x81, 0x76bdec60989c57b2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x2000) ioctl$TCFLSH(r5, 0x540b, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xd4, 0x10b793dec766ef1) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 03:57:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x6000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x2800) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendto$netrom(r2, &(0x7f0000000100)="26dd84696bacb4599a10cbab34c0d4ea35b50a3c052e4686f5105d74756a90d347c614e0524cf934d2520af18c1a5c01bb065e31db7eaa931e2c95ca63b4ac4d80f3b3a1bbc3018aec20c524c66b27dbb55c1624290b1ef08c44fd88eda735154326f6c77ee2cb9d70bb41926c9ccf7235ce467278f9acc0b2be6ce04819bbc5e07c3044b2f0d8c4e5dcba36aa0c1ab6fa198ba3e4f33b5f86ef4792bd57607ad214b0a52da82bf9b5419ca3bb4e12c0778991823becd7382f88", 0xba, 0x8000, &(0x7f00000001c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0xa00) ftruncate(r1, 0x6) [ 1465.587588][T14612] block nbd3: Receive control failed (result -107) [ 1466.028044][T14852] block nbd3: shutting down sockets 03:57:49 executing program 5: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) fdatasync(r4) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0x0, [], 0x9, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x108) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0x0, r4}) 03:57:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x7000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:49 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') prctl$PR_GET_SECUREBITS(0x1b) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/20, 0x14) 03:57:49 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008914, &(0x7f00000001c0)="080db5055e0bcfe8696071") dup(r1) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000340)="08f0b9d87678f40db5055eff00000000000000dba44b3ba00dfafa0da56d40ef7fb089eb9fcd4da98de97977de6753a28ec9b98948eb685ca352705f6f956b6c297a35ad7f130f9fa1710ad8846bf6ba7ceebc048bd681aea7d6c96757b4a21d557cb60aaa0d70395a45322b29bda2e596001beb4f9ed7d39865c961b3870569c36ff015df6c6cab16d88244495b12c1f3855de88fb768153a0d0dce807be6a1b4fb964c0a27b923842418c9c3eb") r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) r4 = gettid() ptrace$setopts(0x4200, r4, 0x0, 0x20) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x2000) write$FUSE_POLL(r7, &(0x7f0000000240)={0x18, 0x0, 0x1}, 0x18) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x1b, 0x5, @tid=r4}, &(0x7f0000000200)=0x0) timer_delete(r8) accept4(r0, 0x0, 0x0, 0x0) r9 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r9, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x24000032, &(0x7f00000000c0)={0xa, 0x4e1e, 0x80, @rand_addr="000000010008000000002000", 0x1}, 0x1c) 03:57:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0x63a7166b) accept4$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10, 0xc0800) 03:57:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xa000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:49 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) pipe2(&(0x7f0000000100), 0x1400) syz_open_dev$usbfs(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x200) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000200)) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:49 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000000)=0x3) rmdir(&(0x7f0000000200)='./file0\x00') r4 = fcntl$getown(r1, 0x9) ptrace$setregs(0xd, r4, 0x5, &(0x7f0000000140)="d51d5ed257b53ce69f4990dc69c6e1b45553135c13572bbac417683c42713e77246dff4f5be05afd5df188ee37f721") openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x4000, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000080), &(0x7f0000000100)=0x4) 03:57:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x18000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz0\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000000)='./file0\x00') 03:57:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x1fffffff}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1466.720243][ T27] audit: type=1804 audit(1578715070.164:312): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir979917420/syzkaller.mo1ehy/1460/file0" dev="sda1" ino=16898 res=1 [ 1466.980971][ T27] audit: type=1804 audit(1578715070.424:313): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir979917420/syzkaller.mo1ehy/1460/file0" dev="sda1" ino=16898 res=1 03:57:50 executing program 5: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x20000000000000, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) r1 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x2, 0x208, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d00000064756d6d79300000000000000000000064756d0004300000000000000000000073797a6b616c6c8279a7e00000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb00000000000000007000000070000000a8000000736e6174000000000000000000000000000000000000000001b700000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='veth0_to_bond\x00', 0x10) 03:57:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) sendfile(r0, r1, &(0x7f0000000040)=0x100060, 0x63a7166b) accept4$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10, 0xc0800) 03:57:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x3f000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:50 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7f, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x200}, 0x28) 03:57:50 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r1, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000480)='./file1\x00') stat(&(0x7f0000000740)='./file1\x00', 0x0) r2 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r2, 0xd, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r3, 0x1, 0x24, &(0x7f0000caaffb), 0x0) accept(r1, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(r4, 0x1, 0x24, &(0x7f0000caaffb), &(0x7f0000000000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000d40)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0x2fd) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f00000002c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000840)=0x0) getpgid(r5) r6 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x80200) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000080)={[], 0x8000, 0x400, 0x7d, 0xfffe, 0x100000005}) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x4, 0x2003, 0xe, 0xd00, 0x0, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6f, 0x73d9, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x5, 0x3, 0x0, 0x3, 0x1, 0x1, 0x401, 0x1, 0x0, 0x200, 0x0, 0x80000001, 0x6, @perf_bp={0x0, 0x8}, 0x224, 0x0, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r7 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff0d}], 0x1, r7) memfd_create(&(0x7f0000000900)='\x00\x05\xdb\x1f]\x0f>\x04\xdb\xbf\x02\x04\x80\xff\xc5\xaf\xe4*\xa6\n\xc1\x05\xdc\x87\x1ct\xea\b\xa1!3\\\xe9\xe7\xac\"\xed\x96F\xec\xdcd\xcan6\x1d\xb3|\xbd\xe2\xc6\xf3\t\xf7\x89K\xc5AG\xf2\xc2]{\xd8\x02iD\xb0\xefXv\x92\xc1\xceg\a\"\x0f\xe0\"w`6\x89', 0x3) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000280)=0x2, 0x4) socket$inet(0x2, 0x6, 0x0) lstat(&(0x7f0000000040)='./file1\x00', &(0x7f0000000640)) sendto$inet(0xffffffffffffffff, 0x0, 0x3aa, 0x4000000, 0x0, 0xfea3) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="f500", 0x10) 03:57:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x40000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:50 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x1c00) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @rand_addr="000000000000000000000200"}, 0x1c) 03:57:50 executing program 5: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESOCT=r3]) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000001c0)=0x1) fcntl$dupfd(r4, 0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000100)='tunl0\x00', 0x10) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendfile(r5, r6, &(0x7f00000005c0), 0xe0) r7 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x18c08, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000380)=0x7fffffff, 0x4) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000340)=0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c, 0x0, 0x0, 0x0, 'syz0\x00'}) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)) r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x0, 0x0) r9 = socket(0x10, 0x80002, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r10 = socket(0x10, 0x80002, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r11 = accept$ax25(r10, &(0x7f00000004c0)={{}, [@bcast, @null, @remote, @null, @bcast, @bcast, @bcast, @rose]}, &(0x7f0000000540)=0xffffffffffffff00) dup2(r9, r11) ioctl$SG_GET_RESERVED_SIZE(r8, 0x2272, &(0x7f0000000200)) sendto$inet(r4, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$inet(r4, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x300, 0x0, 0xfffffffffffffe3d) 03:57:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x48000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:51 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = dup3(r2, r3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r4, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r3, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7c, &(0x7f000059aff8)={r5}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={r5}, &(0x7f0000000080)=0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r6 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:51 executing program 5: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="25bca274769e620a2734fa0095e0612687ecb86a5c8802a9d8aea872943afd874e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="72657367d71e46", @ANYRESHEX=0x0, @ANYBLOB=',\x00']) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x4, 0x4259b9341e7288f5, 0x9000}, 0x4) 03:57:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000000)=0x4) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6465636f6d706f73652c00a04017ce87b0db8a8b3acad4ad92761b4e1853c659cb81112add21c323da901d70927df195ed76a0e80236f483bc4ba110e8589ac827fd1494012dff5d72cdf966d8477c4d76b4b8431e5bd5cd75d68e17a783a18ec4e990933e1dcdf84d68280f6b76eaae9791c5e0"]) 03:57:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x4c000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:51 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x80, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "57d48ca1861c8c8eaad35c3af56ab12b"}, 0x11, 0x7) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="0500000023002f0000068900ac14140de00000013c31b47d0510c147885b6e765e30637ec921f605", 0x28}], 0x5, 0x0, 0x0, 0x50}, 0x0) [ 1467.820624][T15743] EXT4-fs (loop5): Unrecognized mount option "resg×F0x0000000000000000" or missing value [ 1467.944132][T15743] EXT4-fs (loop5): Unrecognized mount option "resg×F0x0000000000000000" or missing value 03:57:51 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x68000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000340)={r9, 0x1ff}, &(0x7f0000000380)=0x8) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7c, &(0x7f000059aff8)={r10}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000180)={r10, @in={{0x2, 0x4e21, @empty}}, [0x7f, 0x5, 0x50b7a660, 0x9, 0x7, 0x6, 0x200, 0x8000, 0x5, 0x5, 0x6, 0x8000, 0xfff, 0xc0]}, &(0x7f00000000c0)=0x100) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1000000000000108, &(0x7f0000000a40)=[{&(0x7f0000000140)=""/31}, {&(0x7f0000000700)=""/89}, {&(0x7f0000000780)=""/129}, {&(0x7f0000000840)=""/148}, {&(0x7f0000001380)=""/4096, 0xffba}, {&(0x7f0000000900)=""/81}, {&(0x7f0000000980)=""/150}], 0x381, 0x0) 03:57:51 executing program 5: socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x40, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @rand_addr="c16235d1e05d94f87fd24b2b0e5af133"}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) socket(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x2000) r6 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffefffffffff, r5, 0x0) r7 = perf_event_open(&(0x7f000001d000)={0xf, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x200, 0x20}, 0x0, 0x0, 0x80000002, 0x9, 0x0, 0x1}, 0x0, 0xfffffffffffffffa, r2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='auxv\x00') r9 = gettid() ptrace$setopts(0x4206, r9, 0x0, 0x0) tkill(r9, 0x3c) ptrace$cont(0x18, r9, 0x0, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r9, 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x2000) ioctl$TIOCGSID(r12, 0x5429, &(0x7f0000000140)=0x0) r14 = syz_open_procfs(r13, &(0x7f0000000080)='cgroup\x00') dup2(r14, r8) preadv(r8, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r6, 0x2405, r7) fallocate(r7, 0x0, 0x3, 0x10000103) ioctl$TIOCSBRK(r2, 0x5427) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r15 = accept4(r0, 0x0, 0x0, 0x0) r16 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') renameat2(r16, &(0x7f0000000240)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x2) r17 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r17, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r19 = dup(r18) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r19, 0x2000) ioctl$GIO_UNISCRNMAP(r19, 0x4b69, &(0x7f0000000280)=""/11) sendto$inet6(r15, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 03:57:51 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000080)={0x3, 0x26, &(0x7f0000000040)="48ff575af3913ebedf70f4d2cede24d9d73a98461e217602c8b8ad8c1498cc6da2198e7ec4e1"}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_LP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 03:57:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x6c000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x74000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1468.480963][T15940] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 1468.538838][T15940] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 03:57:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x12, 0x9c, 0x4, 0x400}, 0x3c) socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000140), 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5}, 0xfffffffffffffdcb) r2 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000380), 0x0}, 0xc) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) 03:57:52 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = geteuid() sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)={0x268, 0x18, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@generic="9be1cc563c61b7024cbe4e8177e6c0dee05332dd30adb9f24f49fad1eff18032f864a171d27b25e163f7b21adb5105b2dd01fac303141b4d7626964736e2c7558ddb670d1aa177a79d22c3ae35b90530b4975e5e93a742832927bd6ce602ace74b57d9bd92bb75ad8154ebd7ba69d183499e633d300b4599ea3670b1cb9035052d732ecd2c61c622e0162874032762dc5a45aafb55ace0e36eb812aba83a33c268c1db57d41d0f3bb73d336291b7921e3392", @generic="a29ddd3dfe121c8f932bbf15a8157ca63e458f0e0e226ea23ab6df2919503931a608b92d4f3f83215edf17fb123678f3e7b7fd8f9dfb04c228327043a14ee399f21791789c3627c30d69714e68841f0158a2efd28681e5aacb3a1c12c488be59491e4d410068fcbfc5a09a1c1fab6dbe877ed0107b6c80b757b8d9d70df69c23453c580108218acef3a7d910e4074a624f467f0d0434867dfb59dc0beba923cf05991ad5c016", @nested={0x14, 0x49, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @u32=0xf3d6}, @typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x30}}]}, @typed={0xea, 0x8d, 0x0, 0x0, @binary="370ab44973b5e8f611bd5d7d7d7129dea0895784ce146bf4b731019469d726f58ac7ebc60dd7422bdd31b2292a4eec11d518076110b7fe6fe19360a35f6e185c01e6b04166bb31b078fbbd3ea366e1f76a1fc77050f22adfaccb68e46c739fe6325c247c2f835514c09e9ded8abd705ca2480acd332a4f890b348ba7024ee79a969bf2e83bba33887bf5d468eb4e580c9c63267c1feafd1e3d05c14c428249da79d47439a53ae1769be3dc20c6031186828735acf4c7302f61fdfe3d66603aab5d68adf5bed841e5858708e6d923418ea975edb15f173baa1c389877e444ae008af06ed6553f"}]}, 0x268}, {&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="71002d8008003800ac1414aa25a59bac711214c58b7132d3c68005000000000000006e1a2538ac37c06f08c844b9d65b9d2093b1148922af459e200131fd5170f7489460f8898c892fd1e0042c6987a529d8aeaf18f6e188d674b8898928f42308ce82be71848ee1d7323b6c5fecc151680000000000"], 0x18c}, {&(0x7f0000000780)={0x330, 0x13, 0x2, 0x70bd29, 0x25dfdbfe, "", [@generic="2cae6402f26613acf01fab82dc80687fbf7aedcf128f030cc0983f4dbd647ac530f5ce28c2fff3e74b2b3c2c3f39cc7c6f7fc6c376cf410e03b4c25e18465acccb820769c40325bf516d247f5c0191aa280d8a91c5f6d53c601ac0f9f9f53e22a73603065dccba3ed5cf12b55d3fb894924ec14790767c9ea043476ff4a58468be80b50ed3d0248b3a258dfa7053b4cf34f0654715e4c4af300e28070e575fa18e08d4eba61d85407b967b2f74fd852cfe58179cd02d0f7f39", @nested={0x17c, 0x9, 0x0, 0x1, [@generic="1626f705e83f29904fba372b03575b9e89313e68afabebe90621358f14f28eb998c43d18b806792454d97a631ff65db832ccc38efb0e99bbc27fe3803729622bbf3c94e18d9ceb2c489b24be3075555aca4329ac6215dc365629fa85814b6e51ff963d05c5ec6ab8b839df9c538658be2db70244d189b24830eb7e8456639d412c294396caffdf98f3043fdde1446939f0c8f0f78339b209f5f48651646fa524c069cb2023a13bc14d430549f3b1bbfd38f8d564322694770da109fe79df2aaeac7eb32d4e", @generic="94147c4040f7e3", @typed={0x8, 0x5, 0x0, 0x0, @u32=0x80000000}, @generic="5fa8597f9f7e69e949680d6d0d0fa43169ca7a333a95262637a869c61847d777414d026849abd02a92aaeabcc1a477fa54ef1cc1ed0af184b0d3427a0dbfc5751a060e3ece6c5084fb57fd529b99b6d89a2b38ddfc2aa9bd175ee92f1d348543a3fab34b0b6daf8809665828c4390b654a9b443fca3c95a42ddee3f2384cb430979ba7dbb7db5cb387dab1ec588f6d5f0ea651eb25aab00cbc687b9b", @generic="5bae6cb15814f2bf"]}, @generic="43a8f758acb592be6c8b45465c9f0375e0172ebb8f895e7446cc523fb7b4c3768cb962eff826c708353ec2d97dfd2ce021906f53d4b1d91d787d3fa2a07ded8cb7e211d6f24deee148c34760a8be5a130c9f9a8e80286fd0e6f7a271f6cbe9a7cbd4ee95599d98a246b56defa635c8ace2dfb6e6c70933c8cde3e86ec81ee564b98a1fe636f387d0072c8538657b0f48fcca04f4c443d19022fb57cbc5b8072a3dceed7d295d6ee05d74256fa1748293162f31080f29bd09fa82c059e88cf9af57f92c6c96b7f708fd67", @generic="8c4f2ead7935f69a567b6ace94f043b710225ae7f8a0199ebddc6bccceeb6c1f"]}, 0x330}], 0x3}, 0x2000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) fsetxattr$security_evm(r5, &(0x7f0000000240)='security.evm\x00', &(0x7f0000000280)=@v1={0x2, "da68d74a4b5377e9"}, 0x9, 0x3) r6 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x2000) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000080)={0x4, r7}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0x7a000000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:52 executing program 5: setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x5) getpid() openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockname(r0, 0x0, 0x0) 03:57:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xff0f0000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:52 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b5d509b3b313000000700000048"], 0xe) r1 = socket(0x3f, 0x3, 0x5) getsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:57:52 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='memory.swap.current\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/455], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xff000000, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141423e0", 0x0, 0x9}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000020c0)='/dev/net/tun\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept$alg(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{}, {}, {}]}) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000280)={0x5}, 0x1) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 03:57:52 executing program 5: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0x4000e) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ppoll(&(0x7f0000000080), 0x20000000000001f9, 0x0, 0x0, 0x67) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/capi/capi20ncci\x00', 0x1623fd096489b218, 0x0) recvmmsg(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/125, 0x7d}, {&(0x7f0000001980)=""/101, 0x65}], 0x3, &(0x7f0000001a40)=""/4096, 0x1000}, 0x1}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a40)=""/163, 0xa3}], 0x1, &(0x7f0000002b40)=""/179, 0xb3}, 0x401}, {{&(0x7f0000002c00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002c80)=""/153, 0x99}], 0x1, &(0x7f0000002d80)=""/120, 0x78}, 0x3}, {{&(0x7f0000002e00)=@l2tp6={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002e80)=""/156, 0x9c}, {&(0x7f0000002f40)=""/51, 0x33}, {&(0x7f0000002f80)=""/196, 0xc4}, {&(0x7f0000003080)=""/72, 0x48}, {&(0x7f0000003100)=""/71, 0x47}, {&(0x7f0000003180)=""/179, 0xb3}], 0x6, &(0x7f00000032c0)=""/89, 0x59}, 0x1ff}], 0x4, 0x20, &(0x7f0000003440)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xffff) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000003480)={@empty, r4}, 0x14) r5 = msgget(0x0, 0x8) msgctl$IPC_RMID(r5, 0x0) msgctl$IPC_STAT(r5, 0x2, &(0x7f0000000300)=""/50) write$P9_RFLUSH(r0, &(0x7f0000000200)={0x7, 0x6d, 0x2}, 0x7) r6 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x4, 0x4, 0x1f, 0x5, 0x0, 0x10001, 0x20000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x7}, 0x2001, 0x2, 0x4, 0x0, 0x7, 0x0, 0x3}, r6, 0x2, r3, 0x1) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10008}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="60eb759a", @ANYRES16=r7, @ANYBLOB="000127bd7000fbdbdf25080000001400020000000000000000000000000000000000080005007f0000010500010001000000140006007465616d5f736c6176655f3100000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24090}, 0x4008801) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x2f, @multicast1, 0x4e21, 0x1, 'sed\x00', 0x4, 0x7, 0x2b}, 0x2c) 03:57:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xfffff000}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:52 executing program 3: r0 = socket$kcm(0xa, 0x0, 0x11) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f00000016c0)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001a40)=[@timestamping={{0x14, 0x1, 0x25, 0xfe}}], 0x18}, 0x24044004) 03:57:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xffffff1f}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:52 executing program 4: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00%'], 0x2) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:57:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}], {0x95, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) socket$l2tp(0x2, 0x2, 0x73) ioctl$UI_DEV_DESTROY(r0, 0x5502) 03:57:53 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x7, &(0x7f0000000000)=[{0x5, 0x3f, 0x20, 0xfffffff8}, {0xfffc, 0x0, 0x81}, {0x1, 0x6, 0x6, 0xfb7}, {0x0, 0xca, 0x53, 0x9}, {0x8001, 0x6, 0xbf, 0xff}, {0x9, 0xe1, 0x8, 0x9}, {0x81, 0x81, 0x3, 0x5}]}) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:53 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000000)={0x2, 0xc0}) syz_open_dev$mice(&(0x7f0000002300)='/dev/input/mice\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="430000005703000000000000003e9ba0e8732556c88c0a273e79a7393993ded4418454901bbcb6cbd262c5aa50bae7dd95a000a1cd56b3c02fb4e68e321176889b1ad660b70000"], &(0x7f0000000180)=0x4b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e21, 0x47ae, @mcast1, 0x5}}, 0xfff, 0xfa0d, 0x4, 0x6, 0x7c, 0x0, 0xa2}, 0x9c) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) [ 1469.772687][T16370] input: syz1 as /devices/virtual/input/input7 [ 1470.020280][T16370] input: syz1 as /devices/virtual/input/input8 03:57:53 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x2000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x400000) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000100)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1, 0x30051, r4, 0x2000) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000000)={0x9, "83d12a8105bf4356a0d3266e0d7ae03d6a73b456895eb362d9d72bb1aa2703ce", 0x1}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000bc0)="3232ce2774e7a3797748648df71c7b4542839e347be35844e42ad67454cd5e140e0ab73493d6b6921681e5536dbc0f309747cc199a7f9a20d01e04d55fb1c26504e3e4738aac76780b5c2363a6dc4d10fe9adc2b363abf6981a31f6a58ef2103e7a145b11649eac6d4cc29a315faf899c2e35d08b1974199c08bf4798207b78d8dd89e727382318265acc85a4444869dfc22ba7fd79b455635a715fa1e705070e2857ef21a3076cdfc2c29b26547360add94ef9c349ae62f54e7a90e1aae762a11b2cc6bd7", 0xc5, 0x5651d1f47cd653b6, 0x0, 0xffffffffffffff95) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) read(r0, &(0x7f0000000ac0)=""/245, 0x100000394) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x24cd, 0x4000002, 0x0, 0x27) 03:57:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000480)='bond0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = dup(r1) accept4(r1, &(0x7f0000000080)=@can={0x1d, 0x0}, &(0x7f0000000140)=0x80, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) r10 = socket(0x10, 0x80002, 0x0) ioctl(r10, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getpeername$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000580)=0x14) r12 = socket(0x10, 0x80002, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_IPV6_IPSEC_POLICY(r12, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000006c0)=0xe8) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x16c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14c, 0x12, @ip6ip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x13c, 0x2, [@tunl6_policy=[@tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x6}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e21}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}], @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x80}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2}], @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={[], [], @multicast2}}, @IFLA_IPTUN_ENCAP_LIMIT={0x5}, @tunl_policy=[@IFLA_IPTUN_TOS={0x5, 0x5, 0x7f}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_LINK={0x8, 0x2, r11}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x4}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}], @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x3e}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x8}], @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}, @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}]], @tunl6_policy=[@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}, @tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x6}, @IFLA_IPTUN_LINK={0x8, 0x2, r13}], @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x18}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x16}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0xffff}]]}}}]}, 0x16c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0xc}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xb}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x94}, 0x1, 0x0, 0x0, 0x8284c}, 0x2010) r14 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000040)={r14}, 0x0, &(0x7f0000000080), 0x0) r15 = add_key(&(0x7f00000004c0)='id_resolver\x00', &(0x7f0000000500)={'syz', 0x1}, &(0x7f0000000880)="45c5d8a4ac6b71db132be193707c9a2c7f2929e202e54f84b060a004c5446747c26a7d96ba697e78d452527f5ffb498affbe658f54ea3c5de003f0039d72d0fc9810fd1ef9387ef847bb079ddfd23b452f4cf6d38f5a88154496d0e913ce8628250c77f4170f2c897b9dc782f41bd2d01694891ea00210e065dfe780a7b927e6a0bbc50e03eb11afacf0f87e399a3574581a08317b165f192ef0675f02fdb53bb62af0cb70dd0c8ddae2642bd9fe98f38c6ad3fff91bbdad49ee2effb68f50272bef4267a62756ae29b110a4cbe801c287883261af72e05aa038ef9b44", 0xdd, r14) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000980)={r15, 0x44, 0x8}, &(0x7f00000009c0)={'enc=', 'oaep', ' hash=', {'xcbc(khazad)\x00'}}, &(0x7f0000000a40)="42be459bd56fe85848770dd001e964eb117a925a19dfaa32b7c5174192e4aa1d8dc9d604fefdcd339d9ff431c8b13c4107546107ba0cba86fe3f0c9da184650ab1454dde", &(0x7f0000000ac0)=""/8) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x3f, &(0x7f0000000100)=[{&(0x7f0000000180)="3e77811c32825479c1bc13518a5fc653995d8f24f66a30209ce8c38f4db5cfc4f24e890c55001c5ce2e7fef99a73d216dcf7ce80fdc66ad1250a4cd8b921dd7590275d66c053ce17964ad77c9679eadd26021b46d812780458fd55f92fb1175adf0490907dd9f5cd577cfc2b05006d422200bc2629afa288b556268fdb647b26df1c52d950dc7e50de4ca92569fcce1e7c6a2a997c03ed0224beb243b0173bdac31d638cf60327525522ef4a1d7dcb65ae80315ccdace64fd14aa445cae92a4d", 0xc0}, {&(0x7f0000000240)="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", 0xfffffed8}], 0x1, 0x0, 0x0, 0x10}, 0x4000010) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) 03:57:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x3, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:53 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:57:53 executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='syz1\x00'}, 0x30) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x7f, 0x8}, 0xc) pipe(&(0x7f00000001c0)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000140)={0xd}) msgget(0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x2000) ioctl$KVM_KVMCLOCK_CTRL(r6, 0xaead) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x5865, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="9000000010003b2400e623010b00fffff0000000", @ANYRES32=0x0, @ANYBLOB="b5219e770a00000008000a00", @ANYRES32=0x6, @ANYBLOB="6800120008000100677265005c00020008000400ac1414bb08000600ac1414aa08000600a9fe15bb08000700ac1414aa080007000000000008000700ac1e010108000a000100000008000300ab0000001800020003000000080011004e24000008000600ac1e000100e4ca15e4c1b4defe4ee63386ba6dbe7d8c06a0c141d534889ac012510fcc533a68ee57c9c647f77b7e99575c91dc242e682bca183ea3b5d016a763a73348817e8d67663dc92e4362cd6f59ec0f3d9d636d7d7df789dfb541bda4ddd0837b4146bdadeb1a2d8bf689053ec0ee1950619d55502562c920fb20a2b81aaa485616f19f6782f358d205913cf3ed9afda01943841d6fda2cd320595b781c672062e2047158d54ed00c030acc9e27f0bc9e142800cd91ba7fdad3994b8ce213355fa195fd005deb1fb04e3d2f09375b2ba23ae1750df5622b09"], 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 03:57:53 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) sched_rr_get_interval(r1, &(0x7f0000000100)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4000000000004e22}, 0x1c) listen(r4, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') sendfile(r6, r5, 0x0, 0x9) sendfile(r5, r6, &(0x7f0000000180), 0x80000000003ff) r7 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8000, 0xa8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0xa8500, 0x0) mq_timedreceive(r7, &(0x7f0000000340)=""/181, 0xb5, 0x2, &(0x7f0000000180)={0x77359400}) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket(0x100000000011, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) 03:57:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x5, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:54 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$radio(0x0, 0x3, 0x2) r2 = fcntl$dupfd(r0, 0x406, r1) fchmodat(r2, &(0x7f0000000080)='./file0\x00', 0x146) r3 = dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x7fff, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:54 executing program 3: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f0000001280)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:57:54 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x2000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x12, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:54 executing program 5: perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x5cd, 0x0, 0xd9f23c71d986ee7, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, 0x0) 03:57:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x14, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x104, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:54 executing program 3: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x400) r0 = socket(0x2, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c000000020601000000000000000000000000000900020073797a5212526f8851d30780080006400000000005000100070000000500040000000000a5000500020000002bfd05000c000000"], 0x4c}}, 0x0) 03:57:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x70c, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:55 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x81803, &(0x7f0000000240)={[{@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0x5b65}}, {@mode={'mode', 0x3d, 0x2}}], [{@smackfsroot={'smackfsroot', 0x3d, 'overlay\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'workdir'}}]}) r1 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x4}, &(0x7f0000000140)=0x28) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}, 0x5c}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x62, 0x63, 0x61, 0x64, 0x66, 0x31, 0x61], 0x2d, [0x61, 0x37, 0x66, 0x39], 0x2d, [0x65, 0x0, 0x18, 0x62], 0x2d, [0x61, 0x33, 0x90b47f7ebb223a6, 0x31], 0x2d, [0xc22152a486e696d2, 0x63, 0x30, 0x92, 0x34, 0x66, 0x62, 0x9b93111bbf8dfd01]}}}], 0xf603000000000000}) 03:57:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0xa00, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:55 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r2, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x11, 0x0, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x7d, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x2}, 0x1c) [ 1471.718800][T16752] overlayfs: option "workdir=./file0\fsuuid=" is useless in a non-upper mount, ignore [ 1471.785350][T16752] overlayfs: missing 'lowerdir' 03:57:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0xc00, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1471.844652][T16752] overlayfs: option "workdir=./file0\fsuuid=" is useless in a non-upper mount, ignore [ 1471.905707][T16752] overlayfs: missing 'lowerdir' 03:57:55 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x2000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:55 executing program 3: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000005e80)={0x0, 0x0, &(0x7f0000005e40)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000300000008000100", @ANYRES32=0x0, @ANYBLOB="dc0102003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e00003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004000400080006", @ANYRES32=0x0, @ANYBLOB="3c97"], 0x9}}, 0x0) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000020e000000000000000009381100080000000c00000010000000140000030000000100000002", 0xfffffffffffffefb, 0x1403}], 0x0, 0x0) 03:57:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0xe02, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:55 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x0, 0x1, 0x2, 0x1, 0x3}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 03:57:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x1002, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x1102, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:56 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") fstat(0xffffffffffffffff, &(0x7f0000000200)) listen(r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r6 = dup(r5) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r6, 0x2000) ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x5) tkill(r3, 0x1000000000016) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r9, 0xa05, 0x0, 0x0, {}, [{{0x8, 0x1, r10}, {0x4}}]}, 0x20}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) getpeername$packet(r13, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) getpeername$packet(r16, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r14}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r17}]}}}]}, 0x48}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r20 = dup(r19) getpeername$packet(r20, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r23 = dup(r22) getpeername$packet(r23, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r21}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r24}]}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'team0\x00', r21}) r26 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r28 = dup(r27) getpeername$packet(r28, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r31 = dup(r30) getpeername$packet(r31, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r26, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r29}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r32}]}}}]}, 0x48}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001780)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in=@multicast1}}, &(0x7f0000001880)=0xe8) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000018c0)={@remote, 0x0}, &(0x7f0000001900)=0x14) r35 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r37 = dup(r36) getpeername$packet(r37, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r40 = dup(r39) getpeername$packet(r40, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r35, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r38}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r41}]}}}]}, 0x48}}, 0x0) r42 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r44 = dup(r43) getpeername$packet(r44, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r47 = dup(r46) getpeername$packet(r47, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r42, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_GSO_MAX_SEGS={0x0, 0x28, 0xa96c}]}, 0xfffffffffffffd3b}}, 0x10) r48 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r50 = dup(r49) getpeername$packet(r50, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r53 = dup(r52) getpeername$packet(r53, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r48, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r51}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r54}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001ac0)={'team0\x00', r51}) r56 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r58 = dup(r57) getpeername$packet(r58, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r61 = dup(r60) getpeername$packet(r61, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r56, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r59}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r62}]}}}]}, 0x48}}, 0x0) r63 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r65 = dup(r64) getpeername$packet(r65, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r68 = dup(r67) getpeername$packet(r68, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r63, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r66}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r69}]}}}]}, 0x48}}, 0x0) r70 = socket(0x10, 0x80002, 0x0) ioctl(r70, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet6_mreq(r70, 0x29, 0x15, &(0x7f0000001b80)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000001bc0)=0x14) r72 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r74 = dup(r73) getpeername$packet(r74, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r77 = dup(r76) getpeername$packet(r77, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r72, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r75}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r78}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001e40)={'team0\x00', 0x0}) r80 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r82 = dup(r81) getpeername$packet(r82, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r85 = dup(r84) getpeername$packet(r85, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r80, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r83}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r86}]}}}]}, 0x48}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000002640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002600)={&(0x7f0000001e80)={0x774, r9, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r14}, {0x164, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r25}, {0x13c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r32}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r33}, {0x168, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r34}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r41}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r45}, {0x138, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x78fa}}, {0x8, 0x6, r55}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r62}, {0x44, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0xd49}}, {0x8, 0x6, r69}}}]}}, {{0x8, 0x1, r71}, {0x1ac, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r78}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r79}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8}}, {0x8, 0x6, r86}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff0000}}}]}}]}, 0x774}, 0x1, 0x0, 0x0, 0x11}, 0x40000) 03:57:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x1200, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1472.758692][T16790] vcan0: Cannot use loopback or non-ethernet device as HSR slave. 03:57:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x1b00, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:56 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, &(0x7f0000000080)=0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}]}, 0x2c}}, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r11}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b531f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) 03:57:56 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r1, 0x2000) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x3100, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1473.083739][T16793] device veth1_to_bridge entered promiscuous mode [ 1473.212031][T16793] xfrm0: Cannot use loopback or non-ethernet device as HSR slave. 03:57:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4002, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1473.259246][T16793] device veth1_to_bridge left promiscuous mode [ 1473.382538][T16796] device team_slave_0 entered promiscuous mode [ 1473.421330][T16796] device team_slave_0 left promiscuous mode 03:57:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4003, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 3: syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x200) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000240)=""/76) ioctl$NBD_DO_IT(r0, 0xab03) r3 = socket(0x15, 0xc, 0x2c) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={[], [], @broadcast}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, [], 0x35}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x10010) 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x6100, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 5: ioctl(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) setpriority(0x2, r0, 0x4) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f00000000c0), 0x26) getsockopt$packet_buf(r1, 0x111, 0x3, 0x0, &(0x7f0000000040)) connect$l2tp(0xffffffffffffffff, &(0x7f00000000c0), 0x26) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r2}) write$nbd(r3, &(0x7f0000000200)={0x67446698, 0x1, 0x2, 0x0, 0x1, "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"}, 0x10e) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x0, @dev={[], 0x2b}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r4, &(0x7f000000d180), 0x4000000000000eb, 0x0) [ 1473.714172][T14612] block nbd3: Receive control failed (result -107) [ 1473.737996][T17020] block nbd3: shutting down sockets 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x8002, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) write$P9_RSTAT(r3, &(0x7f00000001c0)={0x45, 0x7d, 0x2, {0x0, 0x3e, 0x40, 0x80000001, {0x51, 0x2, 0x1}, 0x8000000, 0x1, 0x35709557, 0x7ff, 0x0, '', 0x5, 'nodev', 0x0, '', 0x6, 'system'}}, 0x45) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$IPSET_CMD_DEL(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="e80000000a06800027bd7000fddbdf250700000644000780080006400000003f0c00028008000140e00000020c00028008000140e00000011800018014000240ff020000000000000000000000000001080009400000000109fd010073797a3100000000700008800c00078008000640000000071c0007801800028014000240fe8000000000000000000000000000301c00078018001480140002400000000000000000000000000000000018000780140017007465616d300000000000000000000000100007800c001b4000000000000000020c00078006001d40000800000800094000000200"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x80000) sendmmsg$inet(r4, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) pread64(r4, 0x0, 0xfffffdc4, 0xffffffffffffffa7) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r6 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 1473.856577][T14612] block nbd3: Receive control failed (result -107) 03:57:57 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r8 = syz_open_procfs(0x0, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 03:57:57 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r1, 0x2000) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x8003, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1474.149214][T17020] block nbd3: shutting down sockets 03:57:57 executing program 3: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000340)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x2c5, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)="1d", 0x1, 0xfffffffffffffffd) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205649, &(0x7f0000000100)={0xa30000, 0x80, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990a6a, 0x80, [], @value64=0x8}}) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x2000) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x4161, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r0, r1}, &(0x7f0000000680)=""/253, 0xfd, &(0x7f0000000240)={&(0x7f0000000600)={'sha512\x00'}}) 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0xc002, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0xc003, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x10, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x300, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:57 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syncfs(r0) fcntl$setflags(r1, 0x2, 0x0) 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x500, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x600, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:58 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = socket(0x10, 0x80002, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001280)='/dev/cachefiles\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300)='nl80211\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001500)={0x0, @rand_addr, @loopback}, &(0x7f0000001540)=0xc) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000001680)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)={0x84, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_vlan\x00'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x10000, 0x2}}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'tunl0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0xc010}, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000080)=0x8, 0x4) r5 = dup(0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000100)=0xffffffffffffff4a) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000000280)=""/4096) r6 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x2, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0xfffffffffffffffe, 0x7, {0x8001}}, 0x18) tkill(r6, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:58 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r8 = syz_open_procfs(0x0, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 03:57:58 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r1, 0x2000) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$l2tp(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @hsr={{0x8, 0x1, 'hsr\x00'}, {0x1c, 0x2, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x48}}, 0x0) r9 = socket(0x10, 0x80002, 0x0) r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/dlm-control\x00', 0x20000, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000002740)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r10, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x1c, r11, 0x405, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x63aef153c619cb6d) ioctl(r9, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept4(r9, &(0x7f0000000000)=@can={0x1d, 0x0}, &(0x7f00000000c0)=0x80, 0x80000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="927000fbdbdf250a000000", @ANYRES32=r12, @ANYBLOB="00006807060006004e200000000005000200000008000900070000000600050001000000"], 0x3c}}, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x700, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x900, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1474.993326][T17284] ip6gre0: Cannot use loopback or non-ethernet device as HSR slave. 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xa00, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xb00, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xc00, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:58 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @local}, 0x5}, 0x1c) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000040)={0x2, 0x81, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r4, 0xc0406619, &(0x7f00000000c0)={{0x1, 0x0, @identifier="2843721eb0fcf811460c6e17ce61db93"}}) listen(r0, 0x4000000043) write$FUSE_LSEEK(r1, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x7, {0x80000}}, 0x18) accept4(r0, 0x0, 0x0, 0x101000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f000087dffe)='=', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 03:57:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xd00, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0xe00, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:59 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r8 = syz_open_procfs(0x0, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 03:57:59 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1002, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1003, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1004, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1005, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1006, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1007, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x100a, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:57:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1018, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:00 executing program 3: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$packet(0x11, 0x0, 0x300) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f0000000380)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x840, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r4 = socket(0x1, 0x5, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=0x0, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000180)={r6, 0x7}, 0x8) r7 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x400) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000040)={0x5, [0x40]}, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r8) setresuid(r8, 0x0, 0xffffffffffffffff) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r11 = dup(r10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r11, 0x2000) ioctl$PIO_SCRNMAP(r11, 0x4b41, &(0x7f00000002c0)="d978b24328c2d8c1cd03afc66ee5e9e7dd99fb9e8fbd334368691c69f380a5307512551c4db1d7c261a5ae0338c8881ef3396a938688e59893ee176d1af9a9b27ed2ccfeef2de5b748b171631e3b77c51b4e69bc8634633d79cb577e00ee6e8d637a5428ba632abcc0182b643f829807f46f92259994e2ac37d0c547414a00fa06261ced8e907a3af3f8b2c9de") close(r0) 03:58:00 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0x9, 0x3f}) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x2000) ioctl$FBIOPAN_DISPLAY(r7, 0x4606, &(0x7f0000000200)={0x3c00, 0x300, 0xf0, 0xb20, 0x2, 0x6, 0x0, 0x7, {0xeb, 0xfffffffa, 0x1}, {0x4}, {0x4, 0x2}, {0x400000, 0x3}, 0x0, 0x10, 0x48000000, 0x7, 0x1, 0x100, 0xffff8101, 0x6, 0x1, 0x7, 0x9, 0xff, 0x10, 0x200, 0xf59771f9a0151f84}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1048, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:00 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r8 = syz_open_procfs(0x0, 0x0) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) 03:58:00 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x104c, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1068, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x106c, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1074, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x107a, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1100, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:01 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') syz_open_procfs(0x0, 0x0) 03:58:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1048, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:01 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1200, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:01 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) sigaltstack(&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:01 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7, 0x10}, 0xc) ftruncate(r2, 0x4) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 03:58:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x2000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:01 executing program 4: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB='l\x00\b\x00', @ANYRES16=r1, @ANYBLOB="000229bd7000fbdbdf250600000008000400fcffffff08000800000000001400060000000000f5d3f6d600008000000000010800010047504c000800020007004d7450dd387bcb84091cb5174b00000800010047504c000800020028342d07000000140005000000fdffffff00000000000000000001d2e7df7100000000000000001cfb94fb4a87a4c809df64e38a06794979c27736bd1b8a52237c100c713926938d5bf3a3cf8c437cad08f9b679e0f4fce3572af8ce6f2706996b42dac5304df729fbbcb481b12308ec7b3cffce2b33d392405cb57ebdf3b83715000000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x20000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000e9ff0000950000754c4000"/35], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000180)={0x3dd4, 0xfffffffa, 0x1}) write$FUSE_DIRENT(r3, &(0x7f0000000240)=ANY=[@ANYPTR], 0x8) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000400)=""/7) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000780)={0x1, 0x1, 0x1000, 0x4f, &(0x7f0000000480)="8bca0e1ea4e5329c0b93ed4277e62072f9395171dfcc0e3864d960e47171eb3c041c85e5f88324806e77a25f67cf869c47a5b9d80e03c9e05e2fa2ad686e12bfdde5866855d43e52e6407121154f28", 0x2, 0x0, &(0x7f0000000740)="48ec"}) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20020020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r4, 0x0, 0x70bd27, 0x7, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r4, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:cert_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x94}}, 0x4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x2000) ioctl$DRM_IOCTL_DROP_MASTER(r7, 0x641f) 03:58:01 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="6653070000053c07bc3376070039405cb4aed12f0000000000ae47a825d8", 0x1e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ftruncate(0xffffffffffffffff, 0xe9) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 03:58:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x2f00, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:02 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') 03:58:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x3000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:02 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@security={'security\x00', 0xe, 0x4, 0x2b8, 0x130, 0x130, 0x130, 0x0, 0x220, 0x220, 0x220, 0x220, 0x220, 0x220, 0x4, &(0x7f0000000080), {[{{@ip={@multicast2, @loopback, 0xffffff00, 0xff0000ff, 'veth0_virt_wifi\x00', 'hsr0\x00', {}, {}, 0x2, 0x1}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0xff000000, 0xffffff, 'ip6tnl0\x00', 'ipvlan0\x00', {0xff}, {}, 0x16, 0x1, 0x10}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @local, 0xff, 0x8775bd79c31f09d3, 'bridge_slave_0\x00', 'ip_vti0\x00', {}, {}, 0x84, 0x3, 0x1}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0xd, "1487"}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x1000, 0x40, 0x0, 0x1}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000280), 0x5c9) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10) 03:58:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x4000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1478.702555][T17937] x_tables: duplicate underflow at hook 2 [ 1478.736020][T17937] x_tables: duplicate underflow at hook 2 03:58:02 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x10000000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:02 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() r2 = socket(0x22, 0xe704b20ebea22492, 0x3f) sendto$rose(r2, &(0x7f0000000240)="2a571623d95aff9fd8b8af5017b5ac2d2c46617e4ed57df0ad5c59559a961a6ffcddfb32d755e17c425d3e6722f0bb71635e81694f69763f11bcadfc68e614e577a55c901596c438d61fbbc127620ee5c9fc574f929f5afd2f632dba88fedd46d63a94520f9cb7866118e2d23a508bf578ac0ae532526b27bb78a769ebe5fb2d85a87390f98f95e6bdb95e7d03dd8b6319de1a71254899979a88cfd984e5d7c39918c3613986d642dc3b214a32525b4ca0c53b2b7aafae64b88774137101f17ce50044eff50bd088dcc5a984c9506904f78e278a0a836589a89ea2e2a72e9d700ab698217a985ce73d6f7663801efba0e15b7d91866052f330090aa3ea9f0a14479f5fe0609d13318d11ab8900bb51455062bf354c30dde7752db7f722f26a0c3737e20f2ffb8f9794081776ba65dd3448041c4b6374afe92dad0dc4d27281564d0c182b44f0967cc3a158830f2612ac39ebfd672bb16de36cf43e4b89e29681832cd5afce2a7ebe8a6545f6d16e5a50a32dd4c955141449044ad41e3be9e799d3941dc12b074a2bc01c5bfaccfec05f2a8213a0a17db6d65c7a39cfb8c1de1d53e38f14288908fb9d78ee5038b1061c8d6dc28b156ac69bdf1dfa14208d00140353e2246052380687b242d948868645b7b9470747e6c2a288c917b375bcfc461e7a6f58e372ca647070c86bc4c0059161534b8b06fe83cf421b7c2e1619d54a9a328f1e88208d296df92281963b0d80125f4471ee1c49aec367eebf97006bbabafdde6eab5b56bacc0fc828d307aa74e3986a9983f2941ec4d4cb6f7474701f422117e132105d0e0366f3b7446d9aa1405c963a68e482ef9957a6502add293c044f0fd7c12b50459b1b455500360fc2c7e4aa24854b1b2b1ae4bbdf8decde572d9e60ac1e369057a642b1f70ef75b4af754fd6c2aa1465be76e18c4e0e1e337058613293665b58df5183c6031c6a7a719ab3321b48286375ecb32764e16f8dd5721c0d128cdf128b3c1f03464ab8279c10d381476cc79f37f2e1b2ebf43b40ced2b4a4097dccc7f5be6461b910020152539eb94a07c0a64ed404a4d509b849fa925b48512dd40600b6465af817266750fd55d09cd378545b1e10d938388b8f280564e397cbea426746decb70f00056248e288e8f211e4fe596ef26f577177b42b7bbae532dfdad28e3a384b8d7014527ac0b39e4285038e180e09de564f81e2409f3cf6d77b150f0044e1a60c7c22799fc4845b079f13c673531368476b4247faaaf3d91f14e3af34325a75446a21275b4aeac320cd1fbe05b307846a904ea9560f80425dc01e09fd40f128ebf38e1c2302ee3edaa34922813363c542c8472bd3ef5b014c3241119da3c204e5a9669b0a2ceb15e53d16f57388df2c1e4b44560ddece631cc0f7390fdb29e82c7fa2de8f01cbebbe4eb229fa94b5ffdd6f1d73f8b54e141da978a7dddb9083fe56b8120c6bb1caf0d8791f7d0578863c828669c9f2f9be5b053d0df8f4bb551a0ace70acc75e96203f602cef8c2061740b4723dcb73a6b5bbc75556f21d9b6305c02d9087606c1e3b6af1dee0b694f6563baae840ade3cbecfaf71873b90a01a63cf944284112a13212ad877ee0378a77736dd777e322fb65e59dfd63c7be66ff2e025e0644377ccb433a884ffa2cfe9b4896349732b1dd37edc2324f96b4cf105318e05ed4ae926dfafb761a3901c061430926c32d9af6a2be9e53ec78964fc528b0f107d14e04d675e5bf559834ff0c40093396ad8094c7694bd38257fee2479953bab0a4bf905621cdfa8289f0ac910b6a765a22b015174dba84136f5e7c58516371f2bd60297a3e0d7730f52de99f6341034cd3cd997e1012ce16d39dc31bffb487701076f8ad5f9bc3b13227a98ce17bc9bf608f672edbfbc1336a7b26194216d5dc84bdbe865216395ba6f2952b4fcacfebcfb189e2316ba8153baebc1cbd9ca84e213ac734415605294cf1428d2564fea91be8ee9b7479e4563a61379acda7ebfff6725409b5cb24dc8abd258e7a60ba19b497556a687c1e3bc4b2f3ffe070423fc116da2d70cf5322ed7c29b72e7722e42e421653beeb0fc424a9c99288ecf56f18de14f7df15c38512fd1cf3e9985ba045734f53017928e50cfc7ba11eb5cdd232ef9d76c359a713fa9ea7f7222ec4b2c4ca8ba236c192099518bfd572dd9aa53e005a59a965ddba4fc38af0db0e9277a2d2335d8b47e7b35143887ff913e3c1fe32217aed774b5c19a58277515082646652330820f099764fc4ff93aada6be66e1c6442516b951c93585217f081a22abdd6884610dfe3f253d6d800ac60918b087ebf1184394c0f9daf66d4834a2bd7ea06fb2b0510d540ee9ea1ff74202174927dfcd49e4372a66c51a1fc1d0b736fa6bc2e2b6f1ccd4277fdc2f5ac1af81a75c2c2b06c375cc4c0bb093faad8b0e0138d03d51489331c3cef1266a072af63f6df7438f14659e00bbf114cf06064d8921443fa85cc898b3389fc3b0647ae9fd7b23e928d99b92301fb97c447534d009400277b4905993dc8b9aefb00128da951573886adbcebdb1b657a02dea990c83034a318e7fd4246508f88b3a1dc0673b5a7a8b9434aad7fe8405fc8893cba914282f99ac6c0f9a34afbed1bdb1c11372406b864d61b732376fc55fb0e21248e968323a20cd57f046b0fb0a37b72745f9ae740c6538800e9204d664b41afad6558a1fcdf3442402fad50bb66890aca3c4ee2b45ab6d8d21768882b836b3def820409acc8d06f76ed21827af402e2d8081d55427031a87864351d1912b07bf6b7dc0fb5042c044c98737cd7c6cc5316e22aeab1453b29b2800d8f7c47cbaf2bbb5cd56af8a2e5ac94513359eee4ec506b4ae61e09c5ba991448590866abb05153273d2ca70eabc58de605fb783489831e176e3d983a9c2886a9e270dd7222f6abeb77aaf761ad810074e4f802efd408a9a6552c722eab8265336d83725bfd7c4be704faba226c3faa7c53e16e7e571efd70d009cce46dd4f431f2f30f4aafced601afa8ff266825183c36c1d8c8a8c6528ef0dcdd17da9fbed7f6008ba21dea1731de34dc1e4b3b522ca8bd6f6f3561ab977a1cea468f9e59c52fd81cc71b7f309e71ead54b505f21dc682bc66dc7144dae685bfe24757c1a4573aa6b75a51d95dea5ab5340159adc4b1d1dc57351f70f369b21393d6813ea37da516b00e82af0e92605c666106a912eaf7ee077fd23be2949ba093c258c18e5f33f66ea684bf71779018d16830d01121b5eb47193dad715f9fd88de6b709648ff359640f579a69b2b4352217da86575cc4921401196fd8b6fa0ac3dcb9d8ccf8621f86344bcaabdfa4fa24eb836b5ff3fa889b9fa9d43fe25978843eb9f31a6041828c1cb57a30da85b42c28d9badbdd0fdf311d849203d3a2656ac0233307db639a072696106973209b4da6a10e04e50a9a257b891afceea878816bbcb13927c61469c19d6b42e9114d3ab4022e955a24bb328d852933746d6b0f0ce83c61e325339e78245bad0d21a58d39389e729f61715ddfa04b87d2f7c0edb410ebb19a1686f6520b74fa1236a658b7d87b14ae340da75db2469d3ad70cc9f3827d3294a32ea2e578f27c7d6029a68b302bdab50f74259c260695c69e933358ef7422e2b2e1f30785bb6e6cafe199d2af3e40310b601e967d794915c707e7be40db5e4f21414d06bdce3d2e6585381ea5feec0196516e4c3b00780dbf4056ce7cc8f1f0796444a1b4db4812acca62419798547917c5cb254d97f113b3085defb1445902ebe602618843497e82197f43d12a81575b919848b13175bb3b438605cdf545dd1d305afc3f488a4b994b9e44666377783eadf9dab174794386e0931703454ec48a18662f7be5442e0460d2915d6cffcd01b2bd2bde4d4abadaf3233635251dd2a71c933c8014686b1fb8a4a16933b53d700c7a4d6cc5ec9be0db0e529d75cd122f007f5e50bc2ebce72cc1cee5a043b451090b132a52d9013c4371fd4cd482145cc6cf777683f0f07cd3958c06b325f3bf0a1612777924218043b71a1153bce548bc6ea1468c0ca9712d68ee6752c5553d28c01f42a063d9cef94791df345d20f805f7f30cad77092691a9869f8de9a6dcc17e824f263be7ea3ab0194afb2748d27cd422c0b649a549d620387608a01e94ffe81cd160f9448846f6381c9e23e477e2c6e3125c1019b65f2e0a702ce83f66b9cf03d17f2ae3c31e8a583880c3b9fbcac9ae55e14efef7b2086dd2de235da3bc35ebc17eb9e7936f21f6c46547636809d8543b47c16b56279ac445390b286dcd971d567c0211e3a1246152a35b7c51dace17b9afaffde91b8f108132cff1ce628d058884319c28f638aa0b468469e8ef822f6ed75ffaa7c97ca99cbe74e486baa570c2fe55e7b06a88a678b74e3c7ab55c2287718b5bc7d8fb90952501f0f3ef1921e7e4c6e4b53b21ea6b9ae66984e00d3912be1dc403758477bcb9ea6d941ea21ef9a173169d59ea99fac1709c87cfc9033dbd93ebc8830d60588b2c33a8f113529b09cc10ac31946013d457c25fe106a5ea0f8e5ec9c1649c3708a0ba36e62e01e48b6acf5a0c2dabd3621d62a3aa5a83df1991d6ae266021f08df9db7ec6f0174546f5020755a2bab12be10e43a61ebd2e0bfc3c0112b2f32145bda3f400528985b003fdafdd2c67ba8a172858c8c9d665e0c89c5c82e68ac4c91c992a4bb57f8c33f235de7d329255cff65a09349108ebcdb235fdfb8796160b14851ca51b617db99239eeca00b2ceba911b001af626842a6a75a0550bf2d92ef5bf48f503c9e7730d6c36d52b9805623831f0734e6add16a1ad10770a078baf4f37728ff3378bebc05a077473d14c3fcd4633649518a1ea92efe933e6f04d20b52fa69ee2407d61de132e809e1eb3147175ef17935adea8b23d3e141ffcb2d92a95ea200149464ee85d58115243d0952998c02dd93aae5c9591610493cd39bc09f923222ca9a91b007b115e40aa1c18d5cc5753e8b0cd8fec3ed9288d18c25249760e2cc2f01d274f8582f74bce92442a3485bbe465e696caba5cdde79d94a3c97de128cc9b568fc38cbbe7db1e0b88821764f4fa0a60db31eae8e7ea0571792c9a173f1f5287a4b445a41ef14bfb5d6e7c8ff5f956a93f25e861888f45ebd9e3fee897374ca3873b4e16c4b65e9534aa4799160dbc799671f687c6e5accad55406937e79d6ee0eb2caa44921154d0f183727f5bf620feae66823841d0f90c0235400d9d45716f7d2425971d95ea79b5c2fe502c069b208bda5ec29113444b504646409387b3fa58c677960ff8a969942ae75f85913086312ebd2dd890ffdba02bdb6624cd3dc227232ea4b9d8e8ea95990c8ed266a673c06c9ff1ebf9835494b7ebe6ba584b99aa0986f6e88a1ec1914a95815d2adffac861947e79382d732ff601bb4bdc8f0516625c78a89ba00b1066d283cacabb4e76672b31b08cbab056301dd550b3f5155de393f8aa19b305388704035fd4d5d84e1b55856121291b801637de17e7f07ac3cd4c68eef4acf03023cc6b26e9c2c6c2398d0fc4f7a28b2ced4924f9599ef6ccc4f73ba593b7cc02f5e3a258664a3a043afc52bdf3721629534dc42563c1ca124d4322436ecc921dc246ef6005982806d73976464b38d9c5ba525e9cca8ddc075f37a17c117967ce7f5d8b2731591e0539cdf83678b39e5d1b53d6930e5fec8bd1a6046aed54fcb0135224b7aeebe6e115c65d03beaaf43d9ff2faa2ea3cb465034499e3c72aca6be3b9551c5832c", 0x1000, 0x42004043, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0x7ff, 0x8, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:02 executing program 4: setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x100000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x5) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r5, r5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003ec0)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r9, r9, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) r11 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) r12 = clone3(&(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x40) rt_sigqueueinfo(r12, 0x40, &(0x7f00000016c0)={0x0, 0x0, 0x80000000}) waitid(0x1, r12, &(0x7f0000000100), 0x80000004, &(0x7f0000000180)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000180)={{0x3, r5, r6, r9, r10, 0x0, 0x7}, 0x3ff, 0x2, 0xfffffffffffffffd, 0x0, r11, r12, 0x5}) fchown(r0, r2, r10) ioctl$TCSETSF(r0, 0x5412, &(0x7f0000000000)) fanotify_init(0x0, 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 03:58:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x301c0000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1479.274862][T18050] mkiss: ax0: crc mode is auto. 03:58:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:04 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000380)="2400000021002551075c0165ff0ffc020200000300100f0000e1000c08000c008003a000", 0x24) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81004}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x300, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_MRU={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) 03:58:04 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) 03:58:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x2, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = dup3(r1, r2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r3, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r2, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7c, &(0x7f000059aff8)={r4}, &(0x7f000034f000)=0x2059b000) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7c, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000200)={r9, @in6={{0xa, 0x4e23, 0x4, @loopback, 0x1f}}, 0x3, 0x8000}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={r4, 0x121, 0xfff, 0x8, 0x4, 0x1e, 0xfffe, 0x200, {r10, @in6={{0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x13}, 0x3df1}}, 0x8b, 0x4, 0x81, 0x9, 0x554}}, &(0x7f0000000140)=0xb0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) r11 = socket$kcm(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) 03:58:04 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:04 executing program 0: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x4, &(0x7f0000002200)=[{&(0x7f0000000100)="d9cf3d94b8", 0x5, 0x944}, {&(0x7f00000001c0)="261b", 0x2, 0x800}, {&(0x7f0000000200)="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", 0x1000, 0x4}, {&(0x7f0000001200)="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", 0x1000, 0x3a12}], 0x20000, 0x0) unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) r1 = dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept4$ax25(r1, &(0x7f0000002280)={{0x3, @rose}, [@remote, @netrom, @null, @remote, @bcast, @null, @null, @netrom]}, &(0x7f0000002300)=0x48, 0x0) socket$tipc(0x1e, 0x8, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002340)='/dev/sequencer\x00', 0x40000, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002380)='/dev/sequencer\x00', 0x107002, 0x0) accept4(r3, 0x0, 0x0, 0x100000) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x3, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:05 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x40, 0x9fbc36dbf85c54eb) 03:58:05 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b702000000000400bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000812d6405000000000025040400010000001704000001000a40b7040000000100006a0a00fe00000000850000001a000000b7000000000000009500000000000000d83990832ffdd40a409f01f6147c8f6fd267bf41106f89ec68823ce3c4bcc4ce81f17719ea969f2a019a6137ad1efc966f1cfdc4ea29f673efc20c8dec082bc6de68ab0a5ebf4ee60253518172b4226cc871311ab25868e1d9a0142636973f338d2d41c41e415a2bcc922a3aa71489fad041e59cc9f6c79e0993c96e4c43000000004bcff56cf5a863efb43ea723476ab7140606791e81960ea313ea74c2cde2dedd424a4596f98e3e70a6f1d8abce75f01dbb60bdf7316a57b39031cc158a0a4c6dd4880c767f39a161b050abc5a34588ea19114caebb7995"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x4000, 0x0) mmap$snddsp(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) mmap$perf(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x10, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000008c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) 03:58:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:05 executing program 4: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f00000003c0)='./file0\x00', 0x800000000000000, 0x0, 0x0, 0x0, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f00000001c0), &(0x7f0000000400)=0x4) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_mount_image$vfat(&(0x7f0000000100)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x24, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="f24ab0f5e88bf5ac64d6a87bfbc45e7048b51ae69125a0826333bb94f21952fc00e0424e292800c59bf25f01b83a995ee5009acd4779c547ef8415dc6e29f6115c358aa88813243f05283b7666c9ff7204731d28525efc2af548ae3e17ae70c9cb391acbdef46b9d22715f18d4938699a0b6528c869f2de7e6d9288c2cbc1fe344c6dffab09f67bcd0f1", 0x8a, 0x3}], 0x80804, &(0x7f0000000300)={[{@nonumtail='nnonumtail=1'}, {@iocharset={'iocharset', 0x3d, 'cp864'}}, {@shortname_mixed='shortname=mixed'}], [{@obj_role={'obj_role'}}, {@obj_user={'obj_user'}}, {@smackfsdef={'smackfsdef', 0x3d, 'hfsplus\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'md5sum'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'hfsplus\x00'}}]}) 03:58:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x5, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x6, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:05 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) 03:58:05 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x7, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x28000003, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='cgroup.stat\x00', 0x275a, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008915, &(0x7f00000001c0)='\bi`q\x00\x00\x00\x00\x00\x00\x00') write$binfmt_script(r2, &(0x7f0000000040)=ANY=[], 0x7c774aac) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x10, r2, 0x0) r5 = accept(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1}}, 0x48000) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xffff}, 0x8) close(r1) [ 1482.572641][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:58:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x14876, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_FONT(r0, 0x4b41, &(0x7f0000000100)) 03:58:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xa, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:06 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000000)=0x9a) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(0x0, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:06 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009e01000027c9000000000000000000007c0000000000000004000000000000000700"/380]) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f0000000600)=""/184, 0xb8}, {&(0x7f00000006c0)=""/146, 0x92}, {0x0}], 0x6}}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000ac0)=""/249, 0xf9}], 0x2}}, {{&(0x7f0000000e40)=@nfc_llcp, 0x80, 0x0, 0x0, &(0x7f0000001280)}}, {{&(0x7f0000005540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, 0x0, 0x0, &(0x7f00000056c0)=""/23, 0x17}, 0x235}, {{&(0x7f0000005700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005900)=""/102, 0x66}, {&(0x7f00000059c0)=""/219, 0xdb}, {&(0x7f0000005ac0)=""/108, 0x6c}], 0x3}, 0x7}, {{&(0x7f0000005f00)=@alg, 0x80, 0x0}, 0x1000}, {{&(0x7f00000063c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000069c0)=[{0x0}, {0x0}, {&(0x7f0000006580)=""/216, 0xd8}, {&(0x7f0000006740)=""/205, 0xcd}, {&(0x7f0000006840)=""/154, 0x9a}, {&(0x7f0000006900)=""/159, 0x9f}], 0x6, &(0x7f0000006a40)=""/22, 0x16}}], 0x7, 0x40000201, &(0x7f0000006cc0)={0x0, 0x989680}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x4e21, 0x2, @mcast2, 0x6}}, 0x0, 0x0, 0xf, 0x0, "bf0c8e7daa0589a3d8469a62c117d81971699529a14d2d9a1dbb4f249d4b156a9c3e268c0eb86d647116cdf298720d7314b2b88a0a428ea27da5be11e73b0acf13a350dc977510bac5c0d64d3bf11c65"}, 0xd8) r4 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip_vs\x00') dup(r4) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 03:58:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x18, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x48, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:06 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x404080, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendto$inet6(r2, &(0x7f00000000c0)="c261f7909696c424cf4ce99f", 0xc, 0x884, 0x0, 0x0) close(r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) 03:58:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4c, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:07 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) dup2(r7, r5) 03:58:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x68, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:07 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg$inet(r2, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002740)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x18}}], 0x2, 0x0) 03:58:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001840)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4c0000001100fff1fefefd956fa283b724a6008000000000000000683540150024001c000d000000b598bc593ab682115ed9443d51d7e88dc62b2ca654a6613b6aabf35d0f1cbc882b079881", 0x4c}], 0x1}, 0x0) r2 = socket(0x10, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0xe0201) ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000100)={0x2, 0x3, 0x55, 0x68817e064a2e699d, 0xee}) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x1, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) 03:58:07 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:07 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20040803, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0xab) 03:58:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x6c, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:07 executing program 4: syz_mount_image$xfs(&(0x7f0000000180)='xfs\x00', &(0x7f0000000140)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab424020004000004000000000000000000ec00000c090a020c", 0x7d}], 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) getsockname(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @local}}}}, &(0x7f00000000c0)=0x80) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), 0x4) 03:58:07 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x20000000021) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f00000000c0)=0xfffffffe, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket(0x1, 0x1, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x2000) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000080)) ioctl(r2, 0x1000008916, &(0x7f00000001c0)="080db5055e0bcfe8696071") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xff77, 0x0, 0x0, 0x101aa) 03:58:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x74, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1484.030775][T19090] XFS (loop4): Mounting V4 Filesystem [ 1484.065449][T19090] XFS (loop4): totally zeroed log 03:58:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x7a, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1484.085594][T20632] XFS (loop4): Metadata corruption detected at xfs_agi_verify+0x397/0x570, xfs_agi block 0x2 [ 1484.099054][T20632] XFS (loop4): Unmount and run xfs_repair [ 1484.105554][T20632] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 1484.126746][T20632] 00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.136147][T20632] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.145311][T20632] 00000020: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.154534][T20632] 00000030: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.165291][T20632] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.174504][T20632] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03:58:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xf0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1484.183727][T20632] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.192920][T20632] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1484.202184][T19090] XFS (loop4): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 1484.227594][T19090] XFS (loop4): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 1484.247309][T19090] XFS (loop4): Failed to read root inode 0xd88, error 117 03:58:08 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, 0x0, 0x0) 03:58:08 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) execveat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000240)='system\x00', &(0x7f00000002c0)='veth\x00', &(0x7f0000000300)='eth1eth1,keyring}\x00', &(0x7f0000000340)='veth\x00', &(0x7f0000000380)='%-keyring\x00'], &(0x7f0000000440)=[&(0x7f0000000400)='veth\x00'], 0x2800) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18}}}]}, 0x48}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r3, 0x1, 0x6, @link_local}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 03:58:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x300, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:08 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:08 executing program 4: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/ip6_tables_matches\x00') ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = accept4(r5, 0x0, &(0x7f0000000140), 0x800) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) dup(0xffffffffffffffff) r7 = socket$inet(0x2, 0x4000000805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = dup3(r7, r8, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r9, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r8, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000025e000)=ANY=[@ANYBLOB="5ce84c23", @ANYRES32=0x0], &(0x7f0000a8a000)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1c4}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r12 = dup(r11) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x2000) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000200)={0x6, &(0x7f0000000100)=[{0x6, 0x81, 0x8, 0x80000001}, {0x1ff, 0x8, 0x40, 0xfff}, {0x6e9d, 0x1, 0x81, 0x3}, {0x81, 0x7f, 0x0, 0xfffffffd}, {0xff, 0x8, 0x7f, 0x100}, {0x3, 0x8, 0x4, 0x10000}]}) 03:58:08 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}}, 0x4bbd, 0x7ff, 0x5, 0x7fff, 0x7f}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x3f}, 0x8) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) dup(0xffffffffffffffff) r3 = socket$l2tp(0x2, 0x2, 0x73) readahead(r3, 0x40, 0x8001) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000000)={0x27, 0x1, 0x1, 0x3}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 1485.033977][T19323] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 03:58:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x500, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:08 executing program 0: ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000200)={0x2, 0x0, [0x0, 0x0]}) socket$kcm(0x2b, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x400002b7, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e8bd6efb250009000e000100400000ff050005001201", 0x33fe0}], 0x1}, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r5 = dup(r4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r5, 0x2000) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0xc440, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x0, [0x0, 0x0, 0x0, 0xfc000000]}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x238, r9, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}]}]}, @TIPC_NLA_BEARER={0x84, 0x1, [@TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'ib', 0x3a, 'veth0_to_bridge\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xf3f, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x5, @mcast1, 0x8}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x64}]}]}, 0x238}}, 0xfb751fbb1c09830c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r6, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x25cfef345583ddf1, 0x70, 0x5, 0xe1, 0x0, 0x0, 0x0, 0x100000001, 0xc8000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x6, @perf_bp={&(0x7f00000000c0), 0x9}, 0x0, 0x4, 0xffff, 0x0, 0x2, 0x3, 0x8}, r6, 0x4, r5, 0x9) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e00000010008108040f80ecdb4cb92e0a480e0a10000000e3bd6efb250009000e000300400000ff050005001201", 0x2e}], 0x1}, 0x0) 03:58:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x600, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r6 = socket$inet(0x2, 0x4000000805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r8, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r7, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x7c, &(0x7f000059aff8)={r9}, &(0x7f000034f000)=0x2059b000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000180)={r9, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000d80)={r10, 0x52, 0x1000, "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"}, 0x1008) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d40)=ANY=[@ANYRES64=r3, @ANYRES32=r3, @ANYRES16], 0x3}, 0x1, 0x0, 0x0, 0x800}, 0x0) 03:58:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x700, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xa00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:09 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:09 executing program 4: perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x0, 0x0, 0x0) pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xfffffffe]}, 0x45c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00001da000/0x18000)=nil, 0x0, 0xfffffe72, 0x0, 0x0, 0xa00000000000000) 03:58:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x1800, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:09 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000100)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1b, 0x0, 0x60}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) read(r0, &(0x7f0000e6d000)=""/384, 0x4) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0xffffffff, 0x0, 0x80000001, 0x200}) 03:58:09 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x40000000000013, 0xfffffffffffffffb, 0x0, 0x0, {0xb}}, 0x14}, 0x1, 0x68}, 0x0) r3 = socket(0x10, 0x800000000080002, 0x10) sendmmsg$alg(r3, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="08eefb111833f7d3a312754a3a44d003b1bdfd7dec677ad1607b9e4e51b98f55cb8e90d3d61afe66e46e1754be61720f2f0f4194c2e94b2f7db2ed6fe4dfd06313132f489f7af06fa19279d762086bdb2910138132b47285feb55185b352b36fbe60c1ac1a8cc25a36fe4d5ca0ab4f1c27e9aeeff1e38d8629eed685c4d351df447a8b11450a71b15e563b953167d10a1c831455d97e72ac2d612fd5ee2e55", 0x9f}, {&(0x7f0000000000)="c8472ab9d1977fd07bd07e51eb562648053d306020814e3dfad083804906e2ae0fc5b49f6b92af6400bdd1d0c0918c2c04575f716c5e8cfec273076310a7d09892731b05e3", 0x45}, {&(0x7f00000000c0)="05c5204a133e10fad553e6882f13afecc02d892eaddda3bef44ef8cb208ac12ecc037957697b1590662907252613c34a7f66e38cd87510cf773cc5da46f29a86567cefb7f1847220a5b56d156f4241a32d64c1ba456c861adb02abe3a62f", 0x5e}, {&(0x7f0000000280)="9675b8a15902bb912c584e7f9f98c7ac705413b3659e34d57f738329a8a9cefd986a695a914fc7fd61", 0x29}], 0x4, &(0x7f0000000340)=[@iv={0x40, 0x117, 0x2, 0x26, "4cbeac454715a44ad062c8ad0194f38637f2c4071fb61c69bb9953b74d88105e45a8aed63858"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xa8, 0x117, 0x2, 0x90, "7462c9b55aee4f621461ffaef94b9de835cf4e0592aefd9336fa02730ecaac104c0c4f8ef6c7e51ffc6bfa7fee4fce0430b3bd7612e6f48f776733943e1a5f845981b3964b6c8a19aa6b6af5b852732d122fe7a1fe5609326049117abb3a327df73d855b1f54eae6a2874742e49be59d3762e8364384ff7c8ef62ba49594f60814a7ec4a3d29297de4497df6b27aeffe"}, @iv={0xd8, 0x117, 0x2, 0xc1, "9072c22ad2b5a10901209ba8f00349ff5113e37d760b7f137ccc141dda82f9be2ae48a58a948fdcda960502122b10d11e6b4251664239bb1c2e6ee548923481c4e51f9bf2520e09bd47bc04a65648b7b0b1f1e547625e5df924b13dd7f46e0f51cd1956a32ca4bb25b144326ef1a8936a8b01ab26169161b15bc25bdc946c6e77d080e5d0dc3d50d193bbca6d4e6822cefb0e1cb257de4e9f4569c50d5fe2292136148a62a9a877c3f8a60012c5b6c49efdee4f110138cbc0c13b0c68de58957a2"}, @assoc={0x18, 0x117, 0x4, 0xfffffffb}, @op={0x18}], 0x208, 0x4}], 0x1, 0x40081) 03:58:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x2000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:10 executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000180)={0x77359400}, 0x10) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000340)={0x7, 0x8, 0x4, 0x10, 0x81, {r4, r5/1000+10000}, {0x0, 0x29bd767088b08eaa, 0xff, 0x5, 0x7, 0x7f, "910f469f"}, 0xfffffff9, 0x2, @planes=&(0x7f00000002c0)={0x40, 0x9, @userptr=0x4fd7be31, 0xab}, 0xd9, 0x0, 0xffffffffffffffff}) r7 = syz_open_dev$vcsu(&(0x7f00000003c0)='/dev/vcsu#\x00', 0x2, 0x100) connect$pppl2tp(r6, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x1, 0x4, 0x2}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r11, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000240)=0x3, 0x4) r12 = dup(r10) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x52400904}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)={0x1268, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x219}, @NL80211_ATTR_FTM_RESPONDER={0x1210, 0x10e, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x73, 0x3, "0869afb61dfa0aebd0acfd7b72518c6b01b4db7aa1782f5ec09663ccdb9e7726e24e5d9326b20656c33caa5518b4ca81cab2e4bbb6c1683ab18880a64a365048ec0b74a6b1b9febce630f21618ec4dcc95ab7057bef1573f8cb193abab85ff833b0c50a9d2f760ccbec4e32c1c6ba3"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xce, 0x3, "8d100e1e2fec2f98b329bfd4700789e7ade632fcf960f5ed22cb5be59bbb58d6459e179a0d76afbfb71d746e25c1e8efc40b6601ceba7fcda498e663fd19b92c868ef7e5368542953fb3f86b227caaa3c0e629edc8a8c10f427939d3a4066d361ddeb1388735ed2a92cc114abb133eb9438c5686c891e16d1997ec10d903150b2891cee338e56909c5d5bbefa84b28db859ef5da9e1bc646e08ec8d5f9735a8acd98083acbd66e7df8659a33e8c124c056755113027aae0599118413003783ad7cbf7546a8741017cbba"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4b, 0x3, "4c6871202f9f3326c9078b07a6d4ecb9e80adf20019df4bdf903c7129c0d365141f0e6fdee5cad60426dd8f32060be940b5839385937b52d3671fa3232fe30788f5922d8e67d8b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3a, 0x3, "4f4caad8b63ce5bd94435a43da27899fb09fae438f366108a18cc3f62b75e4e4f3cd1ad03a25ffb84bf0184cf3ccb1cdc32a6b44feda"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1004, 0x3, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x37, 0x3, "2e24d849657e899715b8650283ca282992558cfd8280459a4b3d147bbcbf9af706b6f0a3169ad96f6ff9bb68240ae0a9cf304c"}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x9}, @NL80211_ATTR_SSID={0x9, 0x34, "7eb8467309"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0x147201, 0xfac08, 0xfac06, 0x0, 0xfac08]}]}, 0x1268}, 0x1, 0x0, 0x0, 0x20004051}, 0x4000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r12, 0x2000) ioctl$KDGETKEYCODE(r12, 0x4b4c, &(0x7f0000000040)={0x6, 0x8}) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r8, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 03:58:10 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x0, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x9, @remote, 0x9}}, [0x7fffffff, 0x7, 0x2, 0x9, 0x5, 0x1, 0xca4, 0x3f, 0x35, 0x7, 0x400, 0x80000000, 0x6, 0x8001, 0x20]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @multicast2}}, 0x101, 0x9, 0x0, 0xfffeffff, 0x8}, &(0x7f00000002c0)=0x98) setsockopt(r0, 0x0, 0x7fffffff, &(0x7f00000003c0)="0d52a7e6a7b8efbab98385f5b5ab980df5ddfb5c7c0c0b388491d4868a1afd165564885b52cf25022a17f603fb17fde052535c3797e9d12ac9ce2d6d2d541d9253e08e2e075df320b6671be932301764e36f9280139e6e8a310fbc9e00feb31b9e7d261a0c7907b57e503cbe775c007a88d47a5718ac2bea3d6af3139e2943b64dfc106c43179eb7c30a53007790a036d86c5db853472f2ced87b8357275ec455ff1b60e14af86c7459412b2a913c52f8b65597fb5b28154652f112fdcb301e230b756a8347466a7872eeac3b71abc3f6296ad", 0xd3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'H\x8a# @\x00\x00\xada\xe9'}, {0x20, '/dev/vcsa\x00'}, {0x20, '/vcsa\x00\x00\x00\x00\x00'}, {0x20, '(wlan1-'}, {0x20, '/dev/vcs`\x00\x98\x1fOh\xae~,\xb9\xb1*\x98\xbc.\xc5\xb9\xf0H\xed\xa2.\x7fj\x15\xd1Ho\x8b\xf5\xf4,N\x93\x17\x03G\xd8\xd7x\xf3\x8a;\x93R8\xf4\xe9%\xcao\xe5\x8b\x8b^\x00\xea*z\xf2\x1a[\xf8k\xeat\x01\xdf\x82\x18\xa4h\x10\x9d\xdc.B\t\xce\xa0\x93`\x05\x06\x151\xa1'}]}, 0x94) 03:58:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x3f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:10 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x95, 0x5, &(0x7f0000000080)}) r2 = socket$inet(0x10, 0x5, 0x36) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020907031dfffd946fa2830020200a0009000200001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 03:58:10 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:11 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4800, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:11 executing program 0: socket$kcm(0x10, 0x2, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r1, 0x0, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) 03:58:11 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40, 0x1) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0xfffffffc, 0x1]) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) pipe(0x0) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) sched_rr_get_interval(0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000006ffc)=0x2, 0x4) memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r4, 0x200004) sendfile(r0, r4, 0x0, 0x80001d00c0d0) 03:58:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") recvfrom$unix(r0, &(0x7f0000000380)=""/4096, 0x1000, 0x40, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x8, @mcast1, 0xb1, 0x4}, 0x20) r1 = syz_open_dev$sg(0x0, 0x0, 0x5) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff770005000000200000009600000000000000a4000000000000000000", 0xffffffe5}], 0x2) 03:58:11 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4c00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:11 executing program 0: io_submit(0x0, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='#\x00', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) ioprio_get$uid(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) lchown(0x0, 0x0, 0x0) ioprio_get$uid(0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="40000000000025000400000005007c00000000000000280000000000d4e34ba67f6ebd451a22dec4c83108206624ca7a4f9d38e16565a16eb68ca2227b28aa5a5282ff43ba0c2b77d868c0757da79288e04d05da00f45ebf460b26bbc8ff1a1aecab81fe6d383a064ea312ba66db4ce4948932585fc97ed370ddb2a3acadc69287b2e940eb689162949f0e102da9edd02e3913d84945b63c470000000000003d5e1e904c000000000000000000"], 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x0, 0x8002, 0x0, "041b4d6d199f0dc594b29619cac9d1bc6a504f2677c0da259d139c48d8705c9456c137b17ac9946878deae2681dd0e7c3d2e72b16908f543744f453bb28f828d4a9ed1bb14950a1cd931af2b01d2ec17"}, 0xd8) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") fsetxattr$security_capability(r1, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x6, 0x4}, {0x800, 0x1}]}, 0x14, 0xc145e4bcbffc03cb) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x3, 0x4, 0x2, "3c774e86ffb0068f9392f275ca3fde5c5a92745557d852e3ef806d145e0e00f8", 0x50313459}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{}]}, 0x10) 03:58:11 executing program 3: socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000b001a057a984970c2e4ff00000000950000000000000036ddd03ff57fc98d4083eebde38b3b5b4a2cdc3cc6b4159efcab6fcda2fe29e4cb95faac4b654fcdfe685eaf"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, &(0x7f0000000080)) 03:58:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x6800, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x6c00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:11 executing program 4: syz_open_dev$vcsn(0x0, 0x0, 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002e40)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01010000000000000000010000000000000006000000004c00180000000062726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003de6fcb43724e0b2928036148b98aa0ead0c0d809ef7361a93cb9a288fe3af73f561ce3b41c20c3e8c9f79b5a38068b9f602ba49ac369a58fe0c61b112839204e8d29760eb4b4464ea0b8025ced29ac46193822baf56a4dabad830932de0da135bab712b21f6a72d0fd2bafc0e323ec66a8aa1b4b1fe7793c581907627943f14cb9dfdde54d3d6692832818e25549231d35a138bc8430c0c11a589c8c86764b64c6d953d8e9662f7259b1c69403c2d6f202a8d9c489537582b5ae1c6e36a5f681bddc613e95f140cf5a1d8316131bdec6decf8cb3f4a95cbf3bffc724b93746fbea590ea47bdcc9e01df594b3e227edd580bcba4c04003a64c09c8e0c23663127a1dd26fb9556160df99f9f9e5cb9a71a8b03236e561b3fb8f8bfd020c9c18a5633da0433cc081e8344be4e77981ebbe30e4a53de959581ea31accc84f021d23fdbd812c3ca3177259d441923c"], 0x68}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r5, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7c, &(0x7f000059aff8)={r6}, &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r6, 0x5}, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/vcs#\x00') socket$inet6(0xa, 0x401000000001, 0x0) close(0xffffffffffffffff) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000300), 0x0) keyctl$chown(0x4, r7, 0x0, 0x0) socket(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) keyctl$chown(0x4, 0x0, r9, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002980)={{{@in6=@mcast1, @in6=@dev}}, {{}, 0x0, @in6}}, 0x0) lstat(0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000240)='hfsplus\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) 03:58:11 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:11 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x2) 03:58:11 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x7400, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:11 executing program 0: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) unshare(0x20000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x2010, r3, 0x37f4e000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r4, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/exec\x00', 0x2, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 03:58:11 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 1488.582589][T20433] ERROR: Domain ' /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.0 proc:/self/fd/3' not defined. 03:58:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x7a00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:12 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") recvfrom$x25(0xffffffffffffffff, &(0x7f0000000040)=""/231, 0xe7, 0x40000000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2000, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5b01a8fada84539, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r4}, 0x14) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x7132}) 03:58:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x2) 03:58:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xf000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:12 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) fallocate(r0, 0x0, 0x2000421, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0x4aa}], 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r4 = dup(r3) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r4, 0x2000) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)) sendfile(r0, r0, &(0x7f0000001000), 0xfec) r5 = socket(0x10, 0x80002, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r8 = dup(r7) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r8, 0x2000) ioctl$KDGKBMODE(r8, 0x4b44, &(0x7f0000000100)) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r9 = accept4$rose(r5, &(0x7f0000000080)=@short={0xb, @dev, @null, 0x1, @bcast}, &(0x7f00000000c0)=0x1c, 0x100000) readahead(r9, 0xb48, 0x6) 03:58:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xff0f, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:12 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x200000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:12 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x2, 0x0) read$rfkill(r2, &(0x7f0000000140), 0x8) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x13, 0x12, @macsec={{0xc, 0x1, 'macsec\x00'}, {0x20, 0x2, [@IFLA_MACSEC_WINDOW={0x8, 0x5, 0x2}, @IFLA_MACSEC_SCI={0xc}, @IFLA_MACSEC_PROTECT={0x8, 0xd}]}}}]}, 0x50}}, 0x0) 03:58:12 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x114) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080), 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') 03:58:12 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x2) [ 1489.440028][T20679] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. 03:58:13 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xf0ffff, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:13 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(r0, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) write$cgroup_int(r2, &(0x7f0000000000)=0x81c, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) gettid() r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x3, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x2}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x26002, 0x0, 0x0, 0x6}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x11) socket$kcm(0x11, 0x200000000000002, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161) sendmsg$kcm(r5, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="006c656d5e72ca51"], 0xfdef) 03:58:13 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x0, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xf8e4064b4e858e60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3d27}, 0x0, 0x10000}) write$cgroup_pid(r0, &(0x7f0000000480)=0xffffffffffffffff, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305839, &(0x7f0000000040)) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$cgroup_pid(r0, &(0x7f0000000080), 0xfdef) 03:58:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x1000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x2000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') sendfile(r1, r2, 0x0, 0x84c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001940)="a5", 0x1}], 0x1, 0x0, 0x0, 0x1cb}}], 0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x110, r5, 0x56f39000) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0x27, 0x2, 0x6}, 0x10) sendmmsg$inet6(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="7db8462d145a87106c62005be23787", 0xf}, {&(0x7f0000000340)="cae729d5784d6a377ab436c35b71947904a22feaae5cfbca073360c2843325610c5e39b573034937b8fe77e9db937ae85da610b728ec5b5ea22691e3138e5cccafa8ad712fcb3c4cb8fa2e96", 0x4c}, {&(0x7f00000004c0)="3cbd846ff998c50126daa6aea4bff47c1db2875c942e71370830896fadc20f876a905c930f4a9184705eeaa330214976a55dc24c31bbaa9681f276e87302a24bbb030e02f1ff067a4ed47774b3e24dc27ad42433893533877d0d5c8e25c5398a211332e6c4a713e6fe4c840b8ca42701753ff0f16612b0f6299121f9986ed4aeee55914eb01519415f0d32f0db5e18fc801be5dd9d51a63b7d5261f74170a8fcc91a9b978c", 0xa5}], 0x3}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000580)="d8", 0x1}], 0x1, &(0x7f0000001900)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14}}], 0x30}}], 0x2, 0x400c014) 03:58:13 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x2) 03:58:13 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) 03:58:13 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x3000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:13 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0x1, 0x100, 0x70bd28, 0x25dfdbfd, {0x5, 0x0, 0x1}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2406c140}, 0x8b72f3150dc29995) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1) connect(r2, &(0x7f00007a8000)=@generic={0x0, "95cfb8c57ebde371503a38bd8e3f6ba990189977170a070502000000269a0b966b9b9d3289c8784f16963ce7c312649ce2996cd4d2fb7a95ff986185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e6265300"}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r3, r4, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x7, 0x100000000, 0x100, 0x80000001, 0x5, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$mouse(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x5, 0x2, 0x0, 0xf5, 0x0, 0x8, 0xa1076, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x3}, 0x40, 0x8, 0x7, 0x8, 0xff, 0x9ade, 0x4}, 0x0, 0x8000003, r5, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) 03:58:13 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000040)={0xc, @capture={0x1000, 0x0, {0x39b, 0xc5e6}, 0x8, 0x5}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x3, 0x4, 0xa9bcdf7cf07256d, 0x3, {}, {0x3, 0x8, 0x0, 0x6, 0x42, 0x8, "aa0c1383"}, 0x751, 0x2, @planes=&(0x7f0000000140)={0xc244, 0xff, @mem_offset=0x40, 0x7}, 0x3f, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x2, &(0x7f0000000200)=""/7, &(0x7f00000003c0)=[{0x6d4cba94, 0xb4, 0x5, &(0x7f0000000240)=""/180}, {0x4a, 0x8c, 0x1, &(0x7f0000000300)=""/140}]}) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000440)='rxrpc\x00', 0x0) syz_open_dev$cec(&(0x7f0000000480)='/dev/cec#\x00', 0x0, 0x2) getegid() openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/attr/current\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000500)={0xc, @local, 0x4e23, 0x3, 'fo\x00', 0x1a, 0x800, 0x2e}, 0x2c) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000540)='/proc/capi/capi20ncci\x00', 0x20200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000580)={0x1, @tick=0x3ff, 0x3e, {0xf3, 0xfd}, 0x5, 0x1, 0xed}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$PPPIOCSMRU1(r3, 0x40047452, &(0x7f0000000600)) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x80000, 0x0) ioctl$RTC_AIE_OFF(r4, 0x7002) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000740)=&(0x7f0000000700)) ioperm(0x471, 0x5, 0x7) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000780)={0x595e, {{0x2, 0x4e21, @multicast2}}, 0xe33d1f5cf98b3f7b, 0x6, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @multicast2}}]}, 0x390) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000000b40)={'caif0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r6 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000b80)={0x1, r6}) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000bc0), &(0x7f0000000c00)=0x10) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r7, 0xc038563b, &(0x7f0000000c80)={0x1, 0x0, {0x0, 0x9, 0x2, 0x40}}) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000cc0)=""/35, &(0x7f0000000d00)=0x23) stat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) r8 = openat(r1, &(0x7f0000000e00)='./file0\x00', 0x400, 0x60) getsockopt$nfc_llcp(r8, 0x118, 0x4, &(0x7f0000000e40)=""/158, 0x9e) 03:58:14 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1490.548213][T20989] QAT: Invalid ioctl 03:58:14 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 03:58:14 executing program 4: perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) migrate_pages(0x0, 0x8, 0x0, &(0x7f00000020c0)=0x1) [ 1490.654665][T20989] QAT: Invalid ioctl 03:58:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x5000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:14 executing program 4: io_setup(0x6, &(0x7f0000000000)=0x0) io_cancel(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) move_pages(0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=[0x1], &(0x7f0000000100)=[0x0, 0x0], 0x0) 03:58:14 executing program 0: perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x10000, 0x1, 0xfffffffffffffffe, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x1, 0x5, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000480)=0x7) setreuid(0x0, r3) r4 = getegid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c000100", @ANYRES16=r6, @ANYBLOB="00022bbd7000ffdbdf250e0000000800050009000000080006000400000030000100060002002b000000090006006e6f6e6500000000060004004e240000080009004e00000008000500030000000800050001000000080006000800000008000500de510000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000a80)=""/24, 0x18) r8 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r9) mount$fuseblk(&(0x7f0000000780)='/dev/loop0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x8000, &(0x7f0000000800)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@allow_other='allow_other'}], [{@fowner_lt={'fowner<', r5}}, {@fowner_lt={'fowner<', r7}}, {@euid_lt={'euid<', 0xee00}}, {@obj_type={'obj_type', 0x3d, '/dev/uinput\x00'}}, {@euid_lt={'euid<', r9}}, {@pcr={'pcr', 0x3d, 0x11}}, {@appraise='appraise'}, {@smackfshat={'smackfshat', 0x3d, '/dev/uinput\x00'}}]}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f00000004c0)=@pppol2tp={0x18, 0x1, {0x0, r10, {0x2, 0x4e22, @loopback}, 0x3, 0x3, 0x0, 0x3}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)="e20e585923d8b6a7a5ccba5abd93a0ec3b0ce92e2e8dd77f10d7553edd6faa52e69b947b69b40bc19d3805c9a9afc941ab43f9c067b45ca49c1c66dd6a30ccac088a664cf230ee872bbfa942687c174e515437a3563ec47008e93d16e5fe2cd0775a194105777b9c064b7f9bf74a92d8f52fbfca4f847831514a7dfb1bef6373234de19f5e802322a9161a2a66cc15f14fa1475ba6fd55a71d9501c2d122dee21abc51b864a97829ff4c1e638b0d1e9264550c9096e7a6c7127e", 0xba}], 0x1}}], 0x1, 0x0) r11 = memfd_create(&(0x7f0000000100)='/dev/uinput\x00', 0x0) fsetxattr$security_capability(r1, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x7, 0x1}, {0x3}]}, 0x14, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r11, 0x8982, &(0x7f0000000000)) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000a40)=0x1, 0x4) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x11, r11, 0x0) 03:58:14 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) 03:58:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x6000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:14 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 03:58:14 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 03:58:14 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x7000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:15 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:15 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = getpid() r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3, 0x6, 0x2, 0x9, 0x0, 0x6, 0x20, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x5248c5f009f39ed5, 0x9, 0x1e, 0x3, 0x3f, 0x892ea59, 0x8}, r0, 0x2, r3, 0x2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x8000000, 0x4}, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) connect$nfc_llcp(r4, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x2, 0x7, 0x3, "0e835dbac31a2b19ee91dce8ba70062c68d8d6f0704d39ed9f93432345a6a18aacfce54cd1e11875401210022c4cac07a3947b00", 0x1}, 0x60) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r6 = socket$netlink(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x0, [0x0, 0x0, 0x0, 0xfc000000]}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x188, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x37}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8e}]}, @TIPC_NLA_LINK={0x12c, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf450}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffeff}]}]}, 0x188}, 0x1, 0x0, 0x0, 0xae5691a70454c39f}, 0x802) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) syz_init_net_socket$x25(0x9, 0x5, 0x0) 03:58:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xa000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:15 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) [ 1491.821519][T21276] tipc: Enabling of bearer rejected, failed to enable media 03:58:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x18000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 03:58:15 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x1fffffff, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:15 executing program 4: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0xf6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x42) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r7 = dup(r6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r7, 0x2000) write$P9_RAUTH(r7, &(0x7f0000000100)={0xba}, 0x14) fallocate(r4, 0x20, 0x0, 0x7ff800000) fallocate(r3, 0x20, 0x0, 0x7ff800000) 03:58:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:16 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x3f000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:16 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x40000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 03:58:16 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:16 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x201d01, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000180)=0x4) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="600b42e006000b0090040300001af5c97824", 0x12, 0x400}], 0x1008c01, 0x0) 03:58:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x48000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:16 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) [ 1493.311086][T21525] Unable to read inode block 03:58:16 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x4c000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 03:58:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x68000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:17 executing program 4: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000380)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ff03000000000010", @ANYRES32, @ANYBLOB="00000000e60000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x820020}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, 0x0, 0x4, 0x70bd26, 0x40, {{}, {}, {0x8}}}, 0x24}}, 0x2060040) r1 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x99c6, @dev={0xfe, 0x80, [], 0x21}, 0x3}, {0xa, 0x4e21, 0x1, @mcast1, 0x80000000}, 0x9, [0x20, 0x6, 0x5, 0x9, 0x1, 0x7, 0x4, 0x7]}, 0x5c) add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) 03:58:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x6c000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1493.880872][T21644] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 03:58:17 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:17 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:17 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:17 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x74000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 03:58:17 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x7a000000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xff0f0000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:18 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xfffff000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:18 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 03:58:18 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:18 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:18 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xffffff1f, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:18 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:18 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:18 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 03:58:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0xffffffff, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:19 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:20 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:20 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x3, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:20 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x5, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:20 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:21 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:21 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x7, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:21 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:21 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:21 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:22 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x18, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:22 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:23 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 0: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x48, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:23 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4c, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:23 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 4: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:23 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) r6 = socket(0x10, 0x80002, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r7, 0x0) 03:58:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x68, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:24 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 4: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 1: unshare(0x2000400) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:24 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 1: unshare(0x2000400) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:24 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:24 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6c, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:24 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:25 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) 03:58:25 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:25 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x74, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:25 executing program 1: unshare(0x2000400) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(0xffffffffffffffff, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:25 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:25 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:25 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:25 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:25 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x7a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:26 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xf0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:27 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:27 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:27 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x300, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:27 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) 03:58:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:27 executing program 4: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:27 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:27 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x500, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:27 executing program 4: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x600, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:27 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:27 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x4, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}]}) 03:58:27 executing program 4: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x700, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:28 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, 0xffffffffffffffff, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) 03:58:28 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:28 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x3, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}]}) 03:58:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xa00, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:28 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:28 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:28 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1800, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:28 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x2, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}]}) 03:58:28 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:28 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x4, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}]}) 03:58:28 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:29 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) 03:58:29 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x3, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}]}) 03:58:29 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) 03:58:29 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:29 executing program 1: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:29 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:29 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x3f00, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:29 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x2, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}]}) 03:58:30 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x4, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}]}) 03:58:30 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:30 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) 03:58:30 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:30 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:30 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x3, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}]}) 03:58:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4800, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:30 executing program 1: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:30 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:30 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x2, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}]}) 03:58:30 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4c00, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:30 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:30 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6800, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:31 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r6, 0x0) 03:58:31 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:31 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:31 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6c00, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:31 executing program 1: unshare(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:31 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:31 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:31 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x7400, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:31 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:31 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:32 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) 03:58:32 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x7a00, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:32 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:32 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:32 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:32 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:32 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff]}]}) 03:58:32 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xf000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:32 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:32 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff]}]}) 03:58:32 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7]}]}) 03:58:33 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) 03:58:33 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xff0f, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:33 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000]}]}) 03:58:33 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7]}]}) 03:58:33 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:33 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000]}]}) 03:58:33 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x200000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:33 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001]}]}) 03:58:33 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xf0ffff, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:33 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$P9_RWALK(r3, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) 03:58:33 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001]}]}) 03:58:33 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101]}]}) 03:58:33 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:33 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:34 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:34 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101]}]}) 03:58:34 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:34 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x2000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:34 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:34 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x3000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:34 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r5, 0x0) 03:58:34 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:34 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff]}]}) 03:58:34 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:34 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7]}]}) 03:58:35 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:35 executing program 0: perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:35 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:35 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001, 0x10000]}]}) 03:58:35 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) 03:58:35 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101, 0x80000001]}]}) 03:58:35 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x5000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:35 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:35 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff, [0x0, 0x101]}]}) 03:58:35 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:36 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:36 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:36 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x7000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:36 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) 03:58:36 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xa000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:36 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:36 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x18000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:36 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:37 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) 03:58:37 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) 03:58:37 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:37 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x0, 0x4000000, 0x0, 0x0, 0x7fff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x40, 0x8, 0xfff, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}, {0x3, 0xfb, 0xffffff7f, [0xaa8, 0x8, 0x8, 0x9, 0x28, 0x7fffffff, 0x40]}, {0x1200000, 0x80000001, 0x3f, [0x6, 0xfbdf, 0x5, 0x0, 0x81, 0xffff, 0x8, 0x2]}, {0x0, 0xa1, 0x3b2d, [0x8, 0x2, 0xfd2, 0xffff, 0x5c, 0x2, 0x800, 0x4]}, {0x8, 0x3, 0x8001, [0x5, 0x100, 0x400, 0x4, 0xa002, 0x7, 0x7, 0x9]}]}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) 03:58:37 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1fffffff, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:37 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) 03:58:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x3f000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:37 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x40000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1514.154631][T22582] FAULT_INJECTION: forcing a failure. [ 1514.154631][T22582] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.196999][T22582] CPU: 0 PID: 22582 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1514.206944][T22582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.217019][T22582] Call Trace: [ 1514.220348][T22582] dump_stack+0x197/0x210 [ 1514.224716][T22582] should_fail.cold+0xa/0x10 [ 1514.229341][T22582] ? setup_fault_attr+0x220/0x220 [ 1514.234395][T22582] ? ___might_sleep+0x163/0x2c0 [ 1514.239276][T22582] __should_failslab+0x121/0x190 [ 1514.239299][T22582] should_failslab+0x9/0x14 [ 1514.239312][T22582] __kmalloc+0x2e0/0x770 [ 1514.239332][T22582] ? mark_held_locks+0xf0/0xf0 [ 1514.257759][T22582] ? mark_lock+0xc2/0x1220 [ 1514.257777][T22582] ? _parse_integer+0x190/0x190 [ 1514.257796][T22582] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1514.257817][T22582] tomoyo_realpath_from_path+0xc5/0x660 [ 1514.278394][T22582] ? tomoyo_path_number_perm+0x193/0x520 [ 1514.284252][T22582] tomoyo_path_number_perm+0x1dd/0x520 [ 1514.289738][T22582] ? tomoyo_path_number_perm+0x193/0x520 [ 1514.295399][T22582] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1514.301239][T22582] ? __f_unlock_pos+0x19/0x20 [ 1514.301251][T22588] FAULT_INJECTION: forcing a failure. [ 1514.301251][T22588] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.318570][T22582] ? __fget+0x37f/0x550 [ 1514.322758][T22582] ? do_dup2+0x4f0/0x4f0 [ 1514.327023][T22582] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1514.333276][T22582] ? fput_many+0x12c/0x1a0 [ 1514.337706][T22582] tomoyo_file_ioctl+0x23/0x30 [ 1514.342481][T22582] security_file_ioctl+0x77/0xc0 [ 1514.347441][T22582] ksys_ioctl+0x56/0x180 [ 1514.351709][T22582] __x64_sys_ioctl+0x73/0xb0 [ 1514.356318][T22582] do_syscall_64+0xfa/0x790 [ 1514.360851][T22582] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1514.366778][T22582] RIP: 0033:0x45af49 [ 1514.370687][T22582] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:58:37 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x48000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:37 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x4c000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1514.390385][T22582] RSP: 002b:00007f227f6fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1514.398804][T22582] RAX: ffffffffffffffda RBX: 00007f227f6fec90 RCX: 000000000045af49 [ 1514.406802][T22582] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1514.414914][T22582] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1514.422898][T22582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f227f6ff6d4 [ 1514.430891][T22582] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 [ 1514.442700][T22588] CPU: 1 PID: 22588 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1514.452634][T22588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.470273][T22588] Call Trace: [ 1514.473620][T22588] dump_stack+0x197/0x210 [ 1514.474244][T22582] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1514.477966][T22588] should_fail.cold+0xa/0x10 [ 1514.477991][T22588] ? setup_fault_attr+0x220/0x220 03:58:37 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) r3 = socket(0x10, 0x80002, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) 03:58:37 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1514.478013][T22588] ? ___might_sleep+0x163/0x2c0 [ 1514.478034][T22588] __should_failslab+0x121/0x190 [ 1514.478056][T22588] should_failslab+0x9/0x14 [ 1514.508610][T22588] __kmalloc+0x2e0/0x770 [ 1514.512872][T22588] ? mark_held_locks+0xf0/0xf0 [ 1514.517761][T22588] ? mark_lock+0xc2/0x1220 [ 1514.522198][T22588] ? _parse_integer+0x190/0x190 [ 1514.527081][T22588] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1514.532828][T22588] tomoyo_realpath_from_path+0xc5/0x660 [ 1514.538658][T22588] ? tomoyo_path_number_perm+0x193/0x520 [ 1514.544408][T22588] tomoyo_path_number_perm+0x1dd/0x520 [ 1514.549891][T22588] ? tomoyo_path_number_perm+0x193/0x520 [ 1514.555557][T22588] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1514.561385][T22588] ? __f_unlock_pos+0x19/0x20 [ 1514.566386][T22588] ? __fget+0x37f/0x550 [ 1514.570577][T22588] ? do_dup2+0x4f0/0x4f0 [ 1514.574843][T22588] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1514.581110][T22588] ? fput_many+0x12c/0x1a0 [ 1514.585555][T22588] tomoyo_file_ioctl+0x23/0x30 [ 1514.590433][T22588] security_file_ioctl+0x77/0xc0 [ 1514.595401][T22588] ksys_ioctl+0x56/0x180 [ 1514.599684][T22588] __x64_sys_ioctl+0x73/0xb0 [ 1514.604304][T22588] do_syscall_64+0xfa/0x790 [ 1514.608984][T22588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1514.615059][T22588] RIP: 0033:0x45af49 [ 1514.615792][T22600] FAULT_INJECTION: forcing a failure. [ 1514.615792][T22600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1514.618980][T22588] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1514.651924][T22588] RSP: 002b:00007f1b6a9d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1514.660365][T22588] RAX: ffffffffffffffda RBX: 00007f1b6a9d6c90 RCX: 000000000045af49 [ 1514.668355][T22588] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1514.676340][T22588] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1514.684519][T22588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1b6a9d76d4 [ 1514.692492][T22588] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 [ 1514.700727][T22600] CPU: 0 PID: 22600 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1514.710928][T22600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1514.710935][T22600] Call Trace: [ 1514.710960][T22600] dump_stack+0x197/0x210 [ 1514.710978][T22600] should_fail.cold+0xa/0x10 [ 1514.711000][T22600] ? setup_fault_attr+0x220/0x220 [ 1514.733477][T22600] ? __kasan_check_read+0x11/0x20 [ 1514.733493][T22600] ? mark_lock+0xc2/0x1220 [ 1514.733509][T22600] ? __kernel_text_address+0xd/0x40 [ 1514.733531][T22600] should_fail_alloc_page+0x50/0x60 [ 1514.733552][T22600] __alloc_pages_nodemask+0x1a1/0x910 [ 1514.743944][T22600] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1514.743961][T22600] ? __kasan_check_read+0x11/0x20 [ 1514.743986][T22600] ? setup_fault_attr+0x220/0x220 [ 1514.744006][T22600] cache_grow_begin+0x90/0xc60 [ 1514.753780][T22600] ? trace_hardirqs_off+0x62/0x240 [ 1514.753798][T22600] __kmalloc+0x6b2/0x770 [ 1514.753812][T22600] ? mark_held_locks+0xf0/0xf0 [ 1514.753825][T22600] ? mark_lock+0xc2/0x1220 [ 1514.753844][T22600] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1514.753865][T22600] tomoyo_realpath_from_path+0xc5/0x660 [ 1514.787886][T22588] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1514.790164][T22600] ? tomoyo_path_number_perm+0x193/0x520 [ 1514.790189][T22600] tomoyo_path_number_perm+0x1dd/0x520 [ 1514.790205][T22600] ? tomoyo_path_number_perm+0x193/0x520 [ 1514.790226][T22600] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1514.790247][T22600] ? __f_unlock_pos+0x19/0x20 [ 1514.827404][T22600] ? __fget+0x37f/0x550 [ 1514.827427][T22600] ? do_dup2+0x4f0/0x4f0 [ 1514.838533][T22600] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1514.838553][T22600] ? fput_many+0x12c/0x1a0 [ 1514.838576][T22600] tomoyo_file_ioctl+0x23/0x30 [ 1514.838593][T22600] security_file_ioctl+0x77/0xc0 [ 1514.838610][T22600] ksys_ioctl+0x56/0x180 [ 1514.838630][T22600] __x64_sys_ioctl+0x73/0xb0 [ 1514.887139][T22600] do_syscall_64+0xfa/0x790 [ 1514.891671][T22600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1514.897423][T22607] FAULT_INJECTION: forcing a failure. [ 1514.897423][T22607] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1514.897574][T22600] RIP: 0033:0x45af49 [ 1514.914657][T22600] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1514.934354][T22600] RSP: 002b:00007f227f6fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:58:38 executing program 4 (fault-call:1 fault-nth:1): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1514.942766][T22600] RAX: ffffffffffffffda RBX: 00007f227f6fec90 RCX: 000000000045af49 [ 1514.953418][T22600] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1514.961380][T22600] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1514.969430][T22600] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f227f6ff6d4 [ 1514.977391][T22600] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 [ 1514.986160][T22607] CPU: 1 PID: 22607 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1514.997716][T22607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.008333][T22607] Call Trace: [ 1515.011647][T22607] dump_stack+0x197/0x210 [ 1515.016005][T22607] should_fail.cold+0xa/0x10 [ 1515.020623][T22607] ? setup_fault_attr+0x220/0x220 [ 1515.025666][T22607] ? __kasan_check_read+0x11/0x20 [ 1515.030707][T22607] ? mark_lock+0xc2/0x1220 [ 1515.035144][T22607] ? __kernel_text_address+0xd/0x40 [ 1515.040464][T22607] should_fail_alloc_page+0x50/0x60 03:58:38 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:38 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff, 0x9]}]}) [ 1515.045701][T22607] __alloc_pages_nodemask+0x1a1/0x910 [ 1515.051097][T22607] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1515.056838][T22607] ? __kasan_check_read+0x11/0x20 [ 1515.061891][T22607] ? setup_fault_attr+0x220/0x220 [ 1515.066970][T22607] cache_grow_begin+0x90/0xc60 [ 1515.072102][T22607] ? trace_hardirqs_off+0x62/0x240 [ 1515.077267][T22607] __kmalloc+0x6b2/0x770 [ 1515.081531][T22607] ? mark_held_locks+0xf0/0xf0 [ 1515.086306][T22607] ? mark_lock+0xc2/0x1220 [ 1515.090750][T22607] ? tomoyo_realpath_from_path+0xc5/0x660 03:58:38 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) dup(r1) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) [ 1515.096497][T22607] tomoyo_realpath_from_path+0xc5/0x660 [ 1515.102062][T22607] ? tomoyo_path_number_perm+0x193/0x520 [ 1515.107731][T22607] tomoyo_path_number_perm+0x1dd/0x520 [ 1515.113355][T22607] ? tomoyo_path_number_perm+0x193/0x520 [ 1515.119019][T22607] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1515.124854][T22607] ? __f_unlock_pos+0x19/0x20 [ 1515.129607][T22607] ? __fget+0x37f/0x550 [ 1515.133786][T22607] ? do_dup2+0x4f0/0x4f0 [ 1515.138236][T22607] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1515.144607][T22607] ? fput_many+0x12c/0x1a0 [ 1515.149053][T22607] tomoyo_file_ioctl+0x23/0x30 [ 1515.153829][T22607] security_file_ioctl+0x77/0xc0 [ 1515.158791][T22607] ksys_ioctl+0x56/0x180 [ 1515.163049][T22607] __x64_sys_ioctl+0x73/0xb0 [ 1515.167923][T22607] do_syscall_64+0xfa/0x790 [ 1515.172455][T22607] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1515.178362][T22607] RIP: 0033:0x45af49 03:58:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x68000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:38 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1515.182277][T22607] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1515.201897][T22607] RSP: 002b:00007f1b6a9d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.210329][T22607] RAX: ffffffffffffffda RBX: 00007f1b6a9d6c90 RCX: 000000000045af49 [ 1515.218752][T22607] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1515.226832][T22607] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1515.234907][T22607] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1b6a9d76d4 [ 1515.242894][T22607] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:38 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) [ 1515.373464][T22623] FAULT_INJECTION: forcing a failure. [ 1515.373464][T22623] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.412870][T22623] CPU: 0 PID: 22623 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 03:58:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x6c000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:38 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) [ 1515.422818][T22623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.432887][T22623] Call Trace: [ 1515.436205][T22623] dump_stack+0x197/0x210 [ 1515.440573][T22623] should_fail.cold+0xa/0x10 [ 1515.445192][T22623] ? setup_fault_attr+0x220/0x220 [ 1515.450513][T22623] ? ___might_sleep+0x163/0x2c0 [ 1515.455387][T22623] __should_failslab+0x121/0x190 [ 1515.460346][T22623] should_failslab+0x9/0x14 [ 1515.464869][T22623] __kmalloc+0x2e0/0x770 [ 1515.469581][T22623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.475853][T22623] ? d_absolute_path+0x11b/0x170 [ 1515.480823][T22623] ? __d_path+0x140/0x140 [ 1515.485178][T22623] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1515.490581][T22623] tomoyo_encode2.part.0+0xf5/0x400 [ 1515.495821][T22623] tomoyo_encode+0x2b/0x50 [ 1515.500369][T22623] tomoyo_realpath_from_path+0x19c/0x660 [ 1515.506204][T22623] tomoyo_path_number_perm+0x1dd/0x520 [ 1515.511687][T22623] ? tomoyo_path_number_perm+0x193/0x520 [ 1515.517438][T22623] ? tomoyo_execute_permission+0x4a0/0x4a0 03:58:38 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x74000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:39 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, 0x0) [ 1515.523276][T22623] ? __f_unlock_pos+0x19/0x20 [ 1515.528012][T22623] ? __fget+0x37f/0x550 [ 1515.532199][T22623] ? do_dup2+0x4f0/0x4f0 [ 1515.536469][T22623] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1515.542748][T22623] ? fput_many+0x12c/0x1a0 [ 1515.547195][T22623] tomoyo_file_ioctl+0x23/0x30 [ 1515.552103][T22623] security_file_ioctl+0x77/0xc0 [ 1515.557254][T22623] ksys_ioctl+0x56/0x180 [ 1515.561539][T22623] __x64_sys_ioctl+0x73/0xb0 [ 1515.566178][T22623] do_syscall_64+0xfa/0x790 [ 1515.570704][T22623] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1515.576621][T22623] RIP: 0033:0x45af49 [ 1515.580629][T22623] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1515.600853][T22623] RSP: 002b:00007f227f6fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.609499][T22623] RAX: ffffffffffffffda RBX: 00007f227f6fec90 RCX: 000000000045af49 03:58:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x7a000000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:39 executing program 4 (fault-call:1 fault-nth:2): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1515.617494][T22623] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1515.625485][T22623] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1515.633508][T22623] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f227f6ff6d4 [ 1515.641599][T22623] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 [ 1515.712609][T22623] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1515.764780][T22644] FAULT_INJECTION: forcing a failure. [ 1515.764780][T22644] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.778538][T22644] CPU: 1 PID: 22644 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1515.788459][T22644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1515.798534][T22644] Call Trace: [ 1515.801844][T22644] dump_stack+0x197/0x210 [ 1515.806210][T22644] should_fail.cold+0xa/0x10 [ 1515.810844][T22644] ? setup_fault_attr+0x220/0x220 [ 1515.815930][T22644] ? ___might_sleep+0x163/0x2c0 [ 1515.821018][T22644] __should_failslab+0x121/0x190 [ 1515.825990][T22644] should_failslab+0x9/0x14 [ 1515.830547][T22644] __kmalloc+0x2e0/0x770 [ 1515.835308][T22644] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1515.842002][T22644] ? d_absolute_path+0x11b/0x170 [ 1515.847108][T22644] ? __d_path+0x140/0x140 [ 1515.853024][T22644] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1515.858613][T22644] tomoyo_encode2.part.0+0xf5/0x400 [ 1515.863856][T22644] tomoyo_encode+0x2b/0x50 [ 1515.868306][T22644] tomoyo_realpath_from_path+0x19c/0x660 [ 1515.873966][T22644] tomoyo_path_number_perm+0x1dd/0x520 [ 1515.879592][T22644] ? tomoyo_path_number_perm+0x193/0x520 [ 1515.885293][T22644] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1515.891528][T22644] ? __f_unlock_pos+0x19/0x20 [ 1515.898509][T22644] ? __fget+0x37f/0x550 [ 1515.902673][T22644] ? do_dup2+0x4f0/0x4f0 [ 1515.906940][T22644] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1515.913204][T22644] ? fput_many+0x12c/0x1a0 [ 1515.917648][T22644] tomoyo_file_ioctl+0x23/0x30 [ 1515.922413][T22644] security_file_ioctl+0x77/0xc0 [ 1515.927366][T22644] ksys_ioctl+0x56/0x180 [ 1515.931638][T22644] __x64_sys_ioctl+0x73/0xb0 [ 1515.936246][T22644] do_syscall_64+0xfa/0x790 [ 1515.940770][T22644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1515.946787][T22644] RIP: 0033:0x45af49 [ 1515.950802][T22644] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1515.973139][T22644] RSP: 002b:00007f1b6a9d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1515.981579][T22644] RAX: ffffffffffffffda RBX: 00007f1b6a9d6c90 RCX: 000000000045af49 [ 1515.989689][T22644] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1515.997684][T22644] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1516.006686][T22644] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1b6a9d76d4 03:58:39 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:39 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:39 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r2, 0x0) 03:58:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xff0f0000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:39 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1516.015026][T22644] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 [ 1516.128181][T22644] ERROR: Out of memory at tomoyo_realpath_from_path. 03:58:39 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:39 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xfffff000, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:39 executing program 4 (fault-call:1 fault-nth:3): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1516.174017][T22657] FAULT_INJECTION: forcing a failure. [ 1516.174017][T22657] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.209601][T22657] CPU: 1 PID: 22657 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1516.219556][T22657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.233968][T22657] Call Trace: [ 1516.237281][T22657] dump_stack+0x197/0x210 [ 1516.241692][T22657] should_fail.cold+0xa/0x10 [ 1516.246313][T22657] ? setup_fault_attr+0x220/0x220 [ 1516.251379][T22657] ? ___might_sleep+0x163/0x2c0 [ 1516.256255][T22657] __should_failslab+0x121/0x190 [ 1516.261224][T22657] should_failslab+0x9/0x14 [ 1516.265752][T22657] __kmalloc_track_caller+0x2dc/0x760 [ 1516.271247][T22657] ? watch_queue_ioctl+0x1a8/0x16e0 [ 1516.276528][T22657] memdup_user+0x26/0xd0 [ 1516.281065][T22657] watch_queue_ioctl+0x1a8/0x16e0 [ 1516.286222][T22657] ? do_dup2+0x4f0/0x4f0 [ 1516.290502][T22657] ? watch_queue_map_pages+0x620/0x620 [ 1516.295997][T22657] ? tomoyo_file_ioctl+0x23/0x30 [ 1516.300962][T22657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1516.307223][T22657] ? security_file_ioctl+0x8d/0xc0 [ 1516.312361][T22657] ? watch_queue_map_pages+0x620/0x620 [ 1516.317851][T22657] ksys_ioctl+0x123/0x180 [ 1516.322234][T22657] __x64_sys_ioctl+0x73/0xb0 [ 1516.326941][T22657] do_syscall_64+0xfa/0x790 [ 1516.331539][T22657] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1516.337453][T22657] RIP: 0033:0x45af49 [ 1516.341373][T22657] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1516.360993][T22657] RSP: 002b:00007f227f6fec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.369428][T22657] RAX: ffffffffffffffda RBX: 00007f227f6fec90 RCX: 000000000045af49 [ 1516.377515][T22657] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1516.385767][T22657] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1516.393763][T22657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f227f6ff6d4 [ 1516.398970][T22663] FAULT_INJECTION: forcing a failure. [ 1516.398970][T22663] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.401743][T22657] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:39 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)) 03:58:39 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1516.453046][T22663] CPU: 0 PID: 22663 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1516.463530][T22663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1516.473804][T22663] Call Trace: [ 1516.477117][T22663] dump_stack+0x197/0x210 [ 1516.481576][T22663] should_fail.cold+0xa/0x10 [ 1516.486413][T22663] ? setup_fault_attr+0x220/0x220 [ 1516.492172][T22663] ? ___might_sleep+0x163/0x2c0 [ 1516.497219][T22663] __should_failslab+0x121/0x190 [ 1516.502195][T22663] should_failslab+0x9/0x14 [ 1516.506722][T22663] __kmalloc_track_caller+0x2dc/0x760 [ 1516.512402][T22663] ? watch_queue_ioctl+0x1a8/0x16e0 [ 1516.517626][T22663] memdup_user+0x26/0xd0 [ 1516.521906][T22663] watch_queue_ioctl+0x1a8/0x16e0 [ 1516.526965][T22663] ? do_dup2+0x4f0/0x4f0 [ 1516.531242][T22663] ? watch_queue_map_pages+0x620/0x620 [ 1516.536735][T22663] ? tomoyo_file_ioctl+0x23/0x30 [ 1516.541863][T22663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1516.548139][T22663] ? security_file_ioctl+0x8d/0xc0 03:58:40 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7, 0x0, 0x7fff]}]}) [ 1516.553278][T22663] ? watch_queue_map_pages+0x620/0x620 [ 1516.558936][T22663] ksys_ioctl+0x123/0x180 [ 1516.563298][T22663] __x64_sys_ioctl+0x73/0xb0 [ 1516.567928][T22663] do_syscall_64+0xfa/0x790 [ 1516.572573][T22663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1516.578492][T22663] RIP: 0033:0x45af49 [ 1516.582540][T22663] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:58:40 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1516.602162][T22663] RSP: 002b:00007f1b6a9d6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1516.610822][T22663] RAX: ffffffffffffffda RBX: 00007f1b6a9d6c90 RCX: 000000000045af49 [ 1516.619520][T22663] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1516.627514][T22663] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1516.635810][T22663] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1b6a9d76d4 [ 1516.643800][T22663] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:40 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:40 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xffffff1f, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:40 executing program 4 (fault-call:1 fault-nth:4): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:40 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000, 0x7]}]}) 03:58:40 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x2, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0xffffffff, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:40 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x10, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:40 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:40 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001, 0x10000]}]}) 03:58:40 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x2, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:40 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:41 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200)='NLBL_MGMT\x00') ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:41 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4c01, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:41 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101, 0x80000001]}]}) 03:58:41 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x10, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:41 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:41 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x101]}]}) 03:58:41 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5421, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:41 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x3b65, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1518.076555][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 03:58:41 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:41 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:41 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5450, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:41 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:41 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4c00, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:41 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) [ 1518.406262][T22752] FAULT_INJECTION: forcing a failure. [ 1518.406262][T22752] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.435276][T22752] CPU: 1 PID: 22752 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1518.445224][T22752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.455321][T22752] Call Trace: [ 1518.458729][T22752] dump_stack+0x197/0x210 [ 1518.463361][T22752] should_fail.cold+0xa/0x10 [ 1518.467988][T22752] ? setup_fault_attr+0x220/0x220 [ 1518.473392][T22752] ? ___might_sleep+0x163/0x2c0 [ 1518.478282][T22752] __should_failslab+0x121/0x190 [ 1518.483266][T22752] should_failslab+0x9/0x14 [ 1518.487798][T22752] __kmalloc+0x2e0/0x770 [ 1518.492067][T22752] ? mark_held_locks+0xf0/0xf0 [ 1518.496854][T22752] ? mark_lock+0xc2/0x1220 [ 1518.501282][T22752] ? _parse_integer+0x190/0x190 [ 1518.506909][T22752] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1518.512703][T22752] tomoyo_realpath_from_path+0xc5/0x660 [ 1518.518249][T22752] ? tomoyo_path_number_perm+0x193/0x520 [ 1518.523918][T22752] tomoyo_path_number_perm+0x1dd/0x520 [ 1518.529471][T22752] ? tomoyo_path_number_perm+0x193/0x520 [ 1518.535111][T22752] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1518.541448][T22752] ? __f_unlock_pos+0x19/0x20 [ 1518.546166][T22752] ? __fget+0x37f/0x550 [ 1518.550357][T22752] ? do_dup2+0x4f0/0x4f0 [ 1518.554595][T22752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1518.555917][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1518.560840][T22752] ? fput_many+0x12c/0x1a0 [ 1518.560867][T22752] tomoyo_file_ioctl+0x23/0x30 [ 1518.560885][T22752] security_file_ioctl+0x77/0xc0 [ 1518.560905][T22752] ksys_ioctl+0x56/0x180 [ 1518.560922][T22752] __x64_sys_ioctl+0x73/0xb0 [ 1518.560945][T22752] do_syscall_64+0xfa/0x790 [ 1518.599536][T22752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1518.605440][T22752] RIP: 0033:0x45af49 [ 1518.609343][T22752] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1518.629016][T22752] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1518.638181][T22752] RAX: ffffffffffffffda RBX: 00007f14325fcc90 RCX: 000000000045af49 [ 1518.646177][T22752] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 03:58:42 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:42 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5451, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:42 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4c01, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1518.654175][T22752] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1518.662257][T22752] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1518.670335][T22752] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 [ 1518.689534][T22752] ERROR: Out of memory at tomoyo_realpath_from_path. 03:58:42 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:42 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:42 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5452, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1518.912712][T22774] FAULT_INJECTION: forcing a failure. [ 1518.912712][T22774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1518.925967][T22774] CPU: 0 PID: 22774 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1518.935864][T22774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1518.946196][T22774] Call Trace: [ 1518.949524][T22774] dump_stack+0x197/0x210 [ 1518.953886][T22774] should_fail.cold+0xa/0x10 03:58:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1518.958527][T22774] ? setup_fault_attr+0x220/0x220 [ 1518.963589][T22774] ? __kasan_check_read+0x11/0x20 [ 1518.968632][T22774] ? mark_lock+0xc2/0x1220 [ 1518.973074][T22774] ? __kernel_text_address+0xd/0x40 [ 1518.978311][T22774] should_fail_alloc_page+0x50/0x60 [ 1518.983531][T22774] __alloc_pages_nodemask+0x1a1/0x910 [ 1518.988946][T22774] ? __alloc_pages_slowpath+0x2900/0x2900 [ 1518.994692][T22774] ? __kasan_check_read+0x11/0x20 [ 1518.999749][T22774] ? setup_fault_attr+0x220/0x220 [ 1519.004910][T22774] cache_grow_begin+0x90/0xc60 [ 1519.009714][T22774] ? trace_hardirqs_off+0x62/0x240 [ 1519.014861][T22774] __kmalloc+0x6b2/0x770 [ 1519.019127][T22774] ? mark_held_locks+0xf0/0xf0 [ 1519.023908][T22774] ? mark_lock+0xc2/0x1220 [ 1519.028441][T22774] ? tomoyo_realpath_from_path+0xc5/0x660 [ 1519.034192][T22774] tomoyo_realpath_from_path+0xc5/0x660 [ 1519.039767][T22774] ? tomoyo_path_number_perm+0x193/0x520 [ 1519.045430][T22774] tomoyo_path_number_perm+0x1dd/0x520 [ 1519.050908][T22774] ? tomoyo_path_number_perm+0x193/0x520 [ 1519.056569][T22774] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1519.062402][T22774] ? __f_unlock_pos+0x19/0x20 [ 1519.067139][T22774] ? __fget+0x37f/0x550 [ 1519.071326][T22774] ? do_dup2+0x4f0/0x4f0 [ 1519.075590][T22774] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1519.081864][T22774] ? fput_many+0x12c/0x1a0 [ 1519.086313][T22774] tomoyo_file_ioctl+0x23/0x30 [ 1519.091267][T22774] security_file_ioctl+0x77/0xc0 [ 1519.096232][T22774] ksys_ioctl+0x56/0x180 [ 1519.100502][T22774] __x64_sys_ioctl+0x73/0xb0 [ 1519.105129][T22774] do_syscall_64+0xfa/0x790 03:58:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:42 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5460, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1519.109657][T22774] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1519.115564][T22774] RIP: 0033:0x45af49 [ 1519.119478][T22774] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1519.139096][T22774] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1519.147526][T22774] RAX: ffffffffffffffda RBX: 00007f14325fcc90 RCX: 000000000045af49 [ 1519.155526][T22774] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 03:58:42 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4c06, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1519.163598][T22774] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1519.171783][T22774] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1519.179773][T22774] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:42 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:42 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:42 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:42 executing program 3 (fault-call:1 fault-nth:2): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:42 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x575c, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:42 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5402, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1519.558338][T22804] FAULT_INJECTION: forcing a failure. [ 1519.558338][T22804] name failslab, interval 1, probability 0, space 0, times 0 [ 1519.612487][T22804] CPU: 0 PID: 22804 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1519.622544][T22804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1519.632616][T22804] Call Trace: [ 1519.635937][T22804] dump_stack+0x197/0x210 [ 1519.640300][T22804] should_fail.cold+0xa/0x10 [ 1519.644970][T22804] ? setup_fault_attr+0x220/0x220 [ 1519.650309][T22804] ? ___might_sleep+0x163/0x2c0 [ 1519.655194][T22804] __should_failslab+0x121/0x190 03:58:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1519.660186][T22804] should_failslab+0x9/0x14 [ 1519.664720][T22804] __kmalloc+0x2e0/0x770 [ 1519.669001][T22804] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1519.675274][T22804] ? d_absolute_path+0x11b/0x170 [ 1519.680368][T22804] ? __d_path+0x140/0x140 [ 1519.684731][T22804] ? tomoyo_encode2.part.0+0xf5/0x400 [ 1519.690240][T22804] tomoyo_encode2.part.0+0xf5/0x400 [ 1519.695632][T22804] tomoyo_encode+0x2b/0x50 [ 1519.700090][T22804] tomoyo_realpath_from_path+0x19c/0x660 [ 1519.705882][T22804] tomoyo_path_number_perm+0x1dd/0x520 03:58:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1519.711373][T22804] ? tomoyo_path_number_perm+0x193/0x520 [ 1519.717338][T22804] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1519.723178][T22804] ? __f_unlock_pos+0x19/0x20 [ 1519.727925][T22804] ? __fget+0x37f/0x550 [ 1519.732116][T22804] ? do_dup2+0x4f0/0x4f0 [ 1519.736378][T22804] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1519.742661][T22804] ? fput_many+0x12c/0x1a0 [ 1519.747112][T22804] tomoyo_file_ioctl+0x23/0x30 [ 1519.751948][T22804] security_file_ioctl+0x77/0xc0 [ 1519.757089][T22804] ksys_ioctl+0x56/0x180 03:58:43 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(r1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) [ 1519.761530][T22804] __x64_sys_ioctl+0x73/0xb0 [ 1519.766150][T22804] do_syscall_64+0xfa/0x790 [ 1519.770681][T22804] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1519.776586][T22804] RIP: 0033:0x45af49 [ 1519.780498][T22804] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1519.800350][T22804] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:58:43 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5421, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:43 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5760, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1519.808784][T22804] RAX: ffffffffffffffda RBX: 00007f14325fcc90 RCX: 000000000045af49 [ 1519.816956][T22804] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1519.824945][T22804] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1519.832934][T22804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1519.840929][T22804] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1520.102108][T22804] ERROR: Out of memory at tomoyo_realpath_from_path. 03:58:43 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5450, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:43 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:43 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x6364, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:43 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:43 executing program 3 (fault-call:1 fault-nth:3): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:43 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1520.297061][T22844] FAULT_INJECTION: forcing a failure. [ 1520.297061][T22844] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.343258][T22844] CPU: 0 PID: 22844 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1520.353241][T22844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1520.363512][T22844] Call Trace: [ 1520.366858][T22844] dump_stack+0x197/0x210 [ 1520.371290][T22844] should_fail.cold+0xa/0x10 [ 1520.375912][T22844] ? setup_fault_attr+0x220/0x220 [ 1520.381107][T22844] ? ___might_sleep+0x163/0x2c0 [ 1520.385993][T22844] __should_failslab+0x121/0x190 [ 1520.390965][T22844] should_failslab+0x9/0x14 [ 1520.395495][T22844] __kmalloc_track_caller+0x2dc/0x760 [ 1520.400897][T22844] ? watch_queue_ioctl+0x1a8/0x16e0 [ 1520.406131][T22844] memdup_user+0x26/0xd0 [ 1520.410400][T22844] watch_queue_ioctl+0x1a8/0x16e0 [ 1520.415464][T22844] ? do_dup2+0x4f0/0x4f0 [ 1520.419737][T22844] ? watch_queue_map_pages+0x620/0x620 [ 1520.425253][T22844] ? tomoyo_file_ioctl+0x23/0x30 [ 1520.430220][T22844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1520.436668][T22844] ? security_file_ioctl+0x8d/0xc0 [ 1520.441830][T22844] ? watch_queue_map_pages+0x620/0x620 [ 1520.447313][T22844] ksys_ioctl+0x123/0x180 [ 1520.451756][T22844] __x64_sys_ioctl+0x73/0xb0 [ 1520.456366][T22844] do_syscall_64+0xfa/0x790 [ 1520.460928][T22844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1520.466869][T22844] RIP: 0033:0x45af49 [ 1520.470789][T22844] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:58:43 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5451, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:43 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:44 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x8933, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) [ 1520.490528][T22844] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1520.499323][T22844] RAX: ffffffffffffffda RBX: 00007f14325fcc90 RCX: 000000000045af49 [ 1520.507347][T22844] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1520.515339][T22844] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1520.523422][T22844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1520.523433][T22844] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:44 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5452, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x8982, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:44 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x400454ca, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 5: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:44 executing program 3 (fault-call:1 fault-nth:4): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:44 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5460, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40049409, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) [ 1521.141163][T22888] FAULT_INJECTION: forcing a failure. [ 1521.141163][T22888] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.184745][T22888] CPU: 0 PID: 22888 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1521.194686][T22888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1521.204917][T22888] Call Trace: [ 1521.204945][T22888] dump_stack+0x197/0x210 [ 1521.204966][T22888] should_fail.cold+0xa/0x10 [ 1521.204988][T22888] ? setup_fault_attr+0x220/0x220 [ 1521.205008][T22888] ? ___might_sleep+0x163/0x2c0 [ 1521.205032][T22888] __should_failslab+0x121/0x190 [ 1521.205058][T22888] should_failslab+0x9/0x14 [ 1521.222736][T22888] __kmalloc+0x2e0/0x770 [ 1521.222759][T22888] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1521.222777][T22888] ? _copy_from_user+0x12c/0x1a0 [ 1521.222796][T22888] ? watch_queue_ioctl+0xf57/0x16e0 [ 1521.222815][T22888] watch_queue_ioctl+0xf57/0x16e0 [ 1521.222840][T22888] ? watch_queue_map_pages+0x620/0x620 [ 1521.222861][T22888] ? tomoyo_file_ioctl+0x23/0x30 [ 1521.222876][T22888] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1521.222888][T22888] ? security_file_ioctl+0x8d/0xc0 [ 1521.222903][T22888] ? watch_queue_map_pages+0x620/0x620 [ 1521.222920][T22888] ksys_ioctl+0x123/0x180 [ 1521.222937][T22888] __x64_sys_ioctl+0x73/0xb0 [ 1521.222960][T22888] do_syscall_64+0xfa/0x790 [ 1521.284887][T22888] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1521.299533][T22888] RIP: 0033:0x45af49 [ 1521.299552][T22888] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1521.299559][T22888] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.299572][T22888] RAX: ffffffffffffffda RBX: 00007f14325fcc90 RCX: 000000000045af49 [ 1521.299580][T22888] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1521.299593][T22888] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1521.299602][T22888] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1521.299610][T22888] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 0000000000000004 03:58:44 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:44 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x575c, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:44 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40186366, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 3 (fault-call:1 fault-nth:5): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:44 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4020940d, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:44 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:45 executing program 5: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:45 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5760, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:45 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x800454d2, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:45 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x2, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:45 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:45 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x10, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:45 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80085504, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:45 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x6364, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:45 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:45 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80086301, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:46 executing program 5: r0 = socket(0x0, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:46 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x8912, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:46 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4c00, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:46 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0045878, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:46 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:46 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x8933, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:46 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4c01, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:46 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0045878, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:46 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:46 executing program 5: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:46 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5421, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:46 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x400454ca, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:46 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0184900, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:47 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x0, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:47 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40049409, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0189436, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5450, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:47 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4008af10, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:47 executing program 5: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:47 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5451, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0205647, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40184150, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:47 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:47 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40186366, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:47 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5452, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:47 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc020660b, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:48 executing program 5: r0 = socket(0x10, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc058560f, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:48 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4020940d, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5460, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x575c, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:48 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:48 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80044dff, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:48 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5760, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:49 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x6364, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:49 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80045200, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x10, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x300, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:49 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x800454d2, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x8912, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0xff00, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80086301, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0xffffff1f, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:49 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:49 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x8933, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:49 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80e85411, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0045878, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x400454ca, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:50 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:50 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r2, 0x2000) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r3 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r3, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:50 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0045878, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:50 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:50 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0184900, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40047440, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:50 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x2, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:50 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0189436, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3, [{0x0, 0x0, 0xfff}]}) 03:58:50 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40049409, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:50 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:50 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0205648, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:51 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x401070ca, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:51 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc020660b, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x5, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x40186366, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:51 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0286415, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:51 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4020940d, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x6, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:51 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x3, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x10, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7, [{0x0, 0x0, 0xfff}]}) 03:58:51 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:52 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:52 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:52 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x8, [{0x0, 0x0, 0xfff}]}) 03:58:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:52 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x10, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x800454d2, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:52 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x300, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:52 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf, [{0x0, 0x0, 0xfff}]}) 03:58:52 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:52 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x80086301, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:52 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0045878, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:52 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0xff00, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:52 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, 0xffffffffffffffff, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:52 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x300, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:53 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0xffffff1f, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0045878, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x500, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0189436, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:53 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:53 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x600, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:53 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x2, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc020660b, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:53 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x700, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0286415, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf00, [{0x0, 0x0, 0xfff}]}) 03:58:53 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:54 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0xc0905664, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3f00, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:54 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x0) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4000, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x5, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x3, 0x0, [{}]}) 03:58:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:54 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x6, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x5, 0x0, [{}]}) 03:58:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff00, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:54 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:54 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7, [{0x0, 0x0, 0xfff}]}) 03:58:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x10, 0x0, [{}]}) 03:58:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:55 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:55 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x1000000, [{0x0, 0x0, 0xfff}]}) 03:58:55 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x8, [{0x0, 0x0, 0xfff}]}) 03:58:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:55 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:55 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x2000000, [{0x0, 0x0, 0xfff}]}) 03:58:55 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x300, 0x0, [{}]}) 03:58:55 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf, [{0x0, 0x0, 0xfff}]}) 03:58:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:55 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:55 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x300, [{0x0, 0x0, 0xfff}]}) 03:58:55 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3000000, [{0x0, 0x0, 0xfff}]}) 03:58:55 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0xff00, 0x0, [{}]}) 03:58:55 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:55 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:56 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:56 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x500, [{0x0, 0x0, 0xfff}]}) 03:58:56 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4000000, [{0x0, 0x0, 0xfff}]}) 03:58:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0xffffff1f, 0x0, [{}]}) 03:58:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:56 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:56 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:58:56 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x600, [{0x0, 0x0, 0xfff}]}) 03:58:56 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x5000000, [{0x0, 0x0, 0xfff}]}) 03:58:56 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x2, [{}]}) 03:58:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:57 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x700, [{0x0, 0x0, 0xfff}]}) 03:58:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x6000000, [{0x0, 0x0, 0xfff}]}) 03:58:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3, [{}]}) 03:58:57 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:57 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:57 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf00, [{0x0, 0x0, 0xfff}]}) 03:58:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4, [{}]}) 03:58:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7000000, [{0x0, 0x0, 0xfff}]}) 03:58:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:57 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3f00, [{0x0, 0x0, 0xfff}]}) 03:58:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x5, [{}]}) 03:58:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x8000000, [{0x0, 0x0, 0xfff}]}) 03:58:57 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x0, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:57 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:57 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:57 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf000000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x6, [{}]}) 03:58:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:58 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:58 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3f000000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff00, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7, [{}]}) 03:58:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:58 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:58 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:58 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x1000000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x40000000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x8, [{}]}) 03:58:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:58 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x2000000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf, [{}]}) 03:58:58 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff000000, [{0x0, 0x0, 0xfff}]}) 03:58:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x300, [{}]}) 03:58:58 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:59 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x0, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:58:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0b") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:58:59 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:58:59 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3000000, [{0x0, 0x0, 0xfff}]}) 03:58:59 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x500, [{}]}) 03:58:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:59 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4000000, [{0x0, 0x0, 0xfff}]}) 03:58:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:58:59 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x2, 0x0, 0xfff}]}) 03:58:59 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x600, [{}]}) 03:58:59 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x5000000, [{0x0, 0x0, 0xfff}]}) 03:58:59 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:00 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:00 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3, 0x0, 0xfff}]}) 03:59:00 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x700, [{}]}) 03:59:00 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x6000000, [{0x0, 0x0, 0xfff}]}) 03:59:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:00 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4, 0x0, 0xfff}]}) 03:59:00 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7000000, [{0x0, 0x0, 0xfff}]}) 03:59:00 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf00, [{}]}) 03:59:00 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:00 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x5, 0x0, 0xfff}]}) 03:59:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:00 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x8000000, [{0x0, 0x0, 0xfff}]}) 03:59:00 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4000, [{}]}) 03:59:00 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x6, 0x0, 0xfff}]}) 03:59:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:00 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:00 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf000000, [{0x0, 0x0, 0xfff}]}) 03:59:00 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7f00, [{}]}) 03:59:00 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:00 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x7, 0x0, 0xfff}]}) 03:59:01 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:01 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff00, [{}]}) 03:59:01 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3f000000, [{0x0, 0x0, 0xfff}]}) 03:59:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:01 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x8, 0x0, 0xfff}]}) 03:59:01 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x40000000, [{0x0, 0x0, 0xfff}]}) 03:59:01 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf, 0x0, 0xfff}]}) 03:59:01 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe869") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:01 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff03, [{}]}) 03:59:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:01 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(0xffffffffffffffff, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:01 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff000000, [{0x0, 0x0, 0xfff}]}) 03:59:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:01 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x300, 0x0, 0xfff}]}) 03:59:01 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x1000000, [{}]}) 03:59:01 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(0xffffffffffffffff, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:01 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:59:01 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:01 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x500, 0x0, 0xfff}]}) 03:59:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:02 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x2000000, [{}]}) 03:59:02 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x2, 0x0, 0xfff}]}) 03:59:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:02 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(0xffffffffffffffff, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:02 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x600, 0x0, 0xfff}]}) 03:59:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:02 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x700, 0x0, 0xfff}]}) 03:59:02 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x3000000, [{}]}) 03:59:02 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3, 0x0, 0xfff}]}) 03:59:02 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:02 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4, 0x0, 0xfff}]}) 03:59:02 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:02 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:02 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf00, 0x0, 0xfff}]}) 03:59:02 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x4000000, [{}]}) 03:59:02 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x5, 0x0, 0xfff}]}) 03:59:02 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:03 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3f00, 0x0, 0xfff}]}) 03:59:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:03 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:03 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x6, 0x0, 0xfff}]}) 03:59:03 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x5000000, [{}]}) 03:59:03 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe86960") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:03 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4000, 0x0, 0xfff}]}) 03:59:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:03 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x7, 0x0, 0xfff}]}) 03:59:03 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x6000000, [{}]}) 03:59:03 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x0, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:03 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xff00, 0x0, 0xfff}]}) 03:59:03 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:03 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7000000, [{}]}) 03:59:03 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x0, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:03 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x8, 0x0, 0xfff}]}) 03:59:03 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x1000000, 0x0, 0xfff}]}) 03:59:04 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:04 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x8000000, [{}]}) 03:59:04 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf, 0x0, 0xfff}]}) 03:59:04 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x2000000, 0x0, 0xfff}]}) 03:59:04 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xf000000, [{}]}) 03:59:04 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3000000, 0x0, 0xfff}]}) 03:59:04 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:04 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x300, 0x0, 0xfff}]}) 03:59:04 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x0, 0x80002, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:04 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4000000, 0x0, 0xfff}]}) 03:59:04 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x40000000, [{}]}) 03:59:05 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x500, 0x0, 0xfff}]}) 03:59:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:05 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x7f000000, [{}]}) 03:59:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:05 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x5000000, 0x0, 0xfff}]}) 03:59:05 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x600, 0x0, 0xfff}]}) 03:59:05 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x6000000, 0x0, 0xfff}]}) 03:59:05 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xfdfdffff, [{}]}) 03:59:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:05 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x0, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:05 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x700, 0x0, 0xfff}]}) 03:59:05 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff000000, [{}]}) 03:59:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:05 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x7000000, 0x0, 0xfff}]}) 03:59:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:05 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:05 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf00, 0x0, 0xfff}]}) 03:59:05 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xff030000, [{}]}) 03:59:05 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x8000000, 0x0, 0xfff}]}) 03:59:05 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:05 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3f00, 0x0, 0xfff}]}) 03:59:06 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0xfffffdfd, [{}]}) 03:59:06 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf000000, 0x0, 0xfff}]}) 03:59:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:06 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4000, 0x0, 0xfff}]}) 03:59:06 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x0, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:06 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:06 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xff00, 0x0, 0xfff}]}) 03:59:06 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3f000000, 0x0, 0xfff}]}) 03:59:06 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{}]}) 03:59:06 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x1000000, 0x0, 0xfff}]}) 03:59:06 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:06 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x0, 0x0) ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:06 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x2}]}) 03:59:06 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x40000000, 0x0, 0xfff}]}) 03:59:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:07 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x2000000, 0x0, 0xfff}]}) 03:59:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:07 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3}]}) 03:59:07 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:07 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xff000000, 0x0, 0xfff}]}) 03:59:07 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x3000000, 0x0, 0xfff}]}) 03:59:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:07 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4}]}) 03:59:07 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x4000000, 0x0, 0xfff}]}) 03:59:07 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x0, 0xfff}]}) 03:59:07 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:07 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:07 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x5}]}) 03:59:07 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x5000000, 0x0, 0xfff}]}) 03:59:07 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x2, 0xfff}]}) 03:59:07 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:08 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x3, 0xfff}]}) 03:59:08 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x6000000, 0x0, 0xfff}]}) 03:59:08 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x6}]}) 03:59:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:08 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x80002, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:08 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x7}]}) 03:59:08 executing program 5: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4012, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r1, 0x0) 03:59:08 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x4, 0xfff}]}) 03:59:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:08 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x7000000, 0x0, 0xfff}]}) 03:59:08 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x8}]}) 03:59:08 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x8000000, 0x0, 0xfff}]}) 03:59:08 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf}]}) 03:59:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x7f, 0x7, 0x5}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0xc, 0x4, 0x81000000004, 0x8000000007, 0x0, r0}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x5, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}]}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x25) 03:59:08 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x0, 0x5, 0xfff}]}) 03:59:09 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0xf000000, 0x0, 0xfff}]}) 03:59:09 executing program 1: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) dup(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, 0x0) r1 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x3, 0x2d, 0x0, 0xffffffffffffff9c}) r3 = dup(r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x30051, r3, 0x2000) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x5, 0x1, 0x4}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x372) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = gettid() socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) ioctl(r5, 0x0, &(0x7f00000001c0)="080db5055e0bcfe8696071") timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r4, 0x1000000000016) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) 03:59:09 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000140)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000180)={0x1, 0x0, [{0x300}]}) [ 1545.800930][T24121] ================================================================== [ 1545.809587][T24121] BUG: KASAN: slab-out-of-bounds in watch_queue_ioctl+0x15ed/0x16e0 [ 1545.817607][T24121] Write of size 4 at addr ffff8880a2c63b9c by task syz-executor.3/24121 [ 1545.825941][T24121] [ 1545.828304][T24121] CPU: 0 PID: 24121 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 1545.838795][T24121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1545.849013][T24121] Call Trace: [ 1545.852463][T24121] dump_stack+0x197/0x210 [ 1545.856928][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1545.862240][T24121] print_address_description.constprop.0.cold+0xd4/0x30b [ 1545.869469][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1545.874893][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1545.880209][T24121] __kasan_report.cold+0x1b/0x32 [ 1545.885178][T24121] ? _copy_from_user+0xc1/0x1a0 [ 1545.890231][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1545.895536][T24121] kasan_report+0x12/0x20 [ 1545.899880][T24121] __asan_report_store4_noabort+0x17/0x20 [ 1545.905617][T24121] watch_queue_ioctl+0x15ed/0x16e0 [ 1545.910740][T24121] ? watch_queue_map_pages+0x620/0x620 [ 1545.916225][T24121] ? tomoyo_file_ioctl+0x23/0x30 [ 1545.921180][T24121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1545.927460][T24121] ? security_file_ioctl+0x8d/0xc0 [ 1545.932864][T24121] ? watch_queue_map_pages+0x620/0x620 [ 1545.938385][T24121] ksys_ioctl+0x123/0x180 [ 1545.942736][T24121] __x64_sys_ioctl+0x73/0xb0 [ 1545.947347][T24121] do_syscall_64+0xfa/0x790 [ 1545.951916][T24121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1545.958064][T24121] RIP: 0033:0x45af49 [ 1545.961969][T24121] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1545.981786][T24121] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.990224][T24121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1545.998194][T24121] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1546.006185][T24121] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1546.014166][T24121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1546.022427][T24121] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 00000000ffffffff [ 1546.030545][T24121] [ 1546.032882][T24121] Allocated by task 24121: [ 1546.037306][T24121] save_stack+0x23/0x90 [ 1546.041519][T24121] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1546.047155][T24121] kasan_kmalloc+0x9/0x10 [ 1546.051578][T24121] __kmalloc+0x163/0x770 [ 1546.055813][T24121] watch_queue_ioctl+0xf57/0x16e0 [ 1546.060843][T24121] ksys_ioctl+0x123/0x180 [ 1546.065181][T24121] __x64_sys_ioctl+0x73/0xb0 [ 1546.069785][T24121] do_syscall_64+0xfa/0x790 [ 1546.074310][T24121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1546.080199][T24121] [ 1546.082633][T24121] Freed by task 23519: [ 1546.086715][T24121] save_stack+0x23/0x90 [ 1546.091004][T24121] __kasan_slab_free+0x102/0x150 [ 1546.096177][T24121] kasan_slab_free+0xe/0x10 [ 1546.100698][T24121] kfree+0x10a/0x2c0 [ 1546.104609][T24121] kvfree+0x4a/0x60 [ 1546.108585][T24121] __vunmap+0x6ba/0x950 [ 1546.112757][T24121] __vfree+0x41/0xd0 [ 1546.116649][T24121] vfree+0x5f/0x90 [ 1546.120376][T24121] bpf_check+0xd64/0xad7e [ 1546.124738][T24121] bpf_prog_load+0xeab/0x17f0 [ 1546.129447][T24121] __do_sys_bpf+0x10c9/0x3710 [ 1546.134339][T24121] __x64_sys_bpf+0x73/0xb0 [ 1546.139059][T24121] do_syscall_64+0xfa/0x790 [ 1546.143580][T24121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1546.149873][T24121] [ 1546.152192][T24121] The buggy address belongs to the object at ffff8880a2c63b80 [ 1546.152192][T24121] which belongs to the cache kmalloc-32 of size 32 [ 1546.166265][T24121] The buggy address is located 28 bytes inside of [ 1546.166265][T24121] 32-byte region [ffff8880a2c63b80, ffff8880a2c63ba0) [ 1546.179708][T24121] The buggy address belongs to the page: [ 1546.185363][T24121] page:ffffea00028b18c0 refcount:1 mapcount:0 mapping:ffff8880aa4001c0 index:0xffff8880a2c63fc1 [ 1546.195792][T24121] raw: 00fffe0000000200 ffffea000294c908 ffffea000254ce08 ffff8880aa4001c0 [ 1546.204396][T24121] raw: ffff8880a2c63fc1 ffff8880a2c63000 000000010000003b 0000000000000000 [ 1546.213006][T24121] page dumped because: kasan: bad access detected [ 1546.219416][T24121] [ 1546.221753][T24121] Memory state around the buggy address: [ 1546.227396][T24121] ffff8880a2c63a80: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 1546.235472][T24121] ffff8880a2c63b00: fb fb fb fb fc fc fc fc 00 00 00 fc fc fc fc fc [ 1546.243550][T24121] >ffff8880a2c63b80: 00 00 00 fc fc fc fc fc fb fb fb fb fc fc fc fc [ 1546.251621][T24121] ^ [ 1546.256802][T24121] ffff8880a2c63c00: 00 00 fc fc fc fc fc fc 00 00 00 fc fc fc fc fc [ 1546.264885][T24121] ffff8880a2c63c80: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 1546.272963][T24121] ================================================================== [ 1546.281151][T24121] Disabling lock debugging due to kernel taint [ 1546.289082][T24121] Kernel panic - not syncing: panic_on_warn set ... [ 1546.295931][T24121] CPU: 1 PID: 24121 Comm: syz-executor.3 Tainted: G B 5.5.0-rc5-next-20200110-syzkaller #0 [ 1546.307199][T24121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1546.317240][T24121] Call Trace: [ 1546.320543][T24121] dump_stack+0x197/0x210 [ 1546.324965][T24121] panic+0x2e3/0x75c [ 1546.329021][T24121] ? add_taint.cold+0x16/0x16 [ 1546.333830][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1546.339111][T24121] ? preempt_schedule+0x4b/0x60 [ 1546.343964][T24121] ? ___preempt_schedule+0x16/0x18 [ 1546.349059][T24121] ? trace_hardirqs_on+0x5e/0x240 [ 1546.354066][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1546.359362][T24121] end_report+0x47/0x4f [ 1546.363503][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1546.368832][T24121] __kasan_report.cold+0xe/0x32 [ 1546.373680][T24121] ? _copy_from_user+0xc1/0x1a0 [ 1546.378744][T24121] ? watch_queue_ioctl+0x15ed/0x16e0 [ 1546.384021][T24121] kasan_report+0x12/0x20 [ 1546.388365][T24121] __asan_report_store4_noabort+0x17/0x20 [ 1546.394077][T24121] watch_queue_ioctl+0x15ed/0x16e0 [ 1546.399209][T24121] ? watch_queue_map_pages+0x620/0x620 [ 1546.404648][T24121] ? tomoyo_file_ioctl+0x23/0x30 [ 1546.409586][T24121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1546.415834][T24121] ? security_file_ioctl+0x8d/0xc0 [ 1546.420939][T24121] ? watch_queue_map_pages+0x620/0x620 [ 1546.426739][T24121] ksys_ioctl+0x123/0x180 [ 1546.431049][T24121] __x64_sys_ioctl+0x73/0xb0 [ 1546.435622][T24121] do_syscall_64+0xfa/0x790 [ 1546.440118][T24121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1546.446075][T24121] RIP: 0033:0x45af49 [ 1546.449954][T24121] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1546.469651][T24121] RSP: 002b:00007f14325fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.478208][T24121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49 [ 1546.486474][T24121] RDX: 0000000020000180 RSI: 0000000000005761 RDI: 0000000000000003 [ 1546.494487][T24121] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 1546.502478][T24121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14325fd6d4 [ 1546.510446][T24121] R13: 00000000004d0d88 R14: 00000000004da9f8 R15: 00000000ffffffff [ 1546.520139][T24121] Kernel Offset: disabled [ 1546.524500][T24121] Rebooting in 86400 seconds..