ty.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x1000, 0x2}, {0x4, 0x100000001}]}, 0x14, 0x2) 06:02:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x6000000, 0x5, 0x0, r0, 0x0}]) 06:02:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008923, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:06 executing program 4: clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x7007e4e6dfd4ef6c, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x141) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, 0x0, &(0x7f0000000080)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r2) fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [], r5}, 0x18, 0x0) r6 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={r3, r5, r6}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00\xba\x99FH\xf4\a\xaf\x04\x14\xe1\xb8d\xd4@O\xce\xbb\xe4\xdf\xc1\xe9l\x05\x9b\xd5\x1dD\xc7k\x8f\xee\xab\x920\xab\x06\xaf\xb6|&\xb7s>\xac\xebo\xb9\xcd\xfa\xb5N7\x1c!\x9c@ad\xfa\x9d\xffc\xfe\xf5[J\xe9\f\xa9\xc7\xd9e\xc9c\xddI\x94|~\x98\x8c\x14\xfb\x9c1\vu\x13\xd9\xb2\xce\x96\xe9\xdfj\xa5\xec\x19\xd8`.\x91\xdb<\xe9\x195\x81\xb1\xd1\xcbM\xc7VJ5\xb7U\xf6\xc2B\f\x13\x02\x7f\xc3\x99\xbf\xa6\xcc\xaf\xfe\xc88\xb5\xcb\xa2X\xd3\x94\x9d\xe5\xc0\\\x86?\x12 \x0e\xb0\xe8\x11z\xcd\x12Na\xf5\xbc D\x9a#\xe1\xa0h\xcb\x9dkDPp\xc4\xd2\xa7\xbejn\xfb\x03v--\xc5 \xb8\xeaq\x0f\x9a\n\xcb%\x1d\xc2\x82\x9f\x1f\xcd\xc8\x818\xa6\xea\x12\xd7\x1b?\xa0u\xb1z\xb3-\xb7\xc8\xc3\b\x1fI5\xcaxb\x0f\xfa/u\x18\xc6\x06\xa6V\xf0\xa7#5\xaeWPV\xf40xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x7000000, 0x5, 0x0, r0, 0x0}]) 06:02:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008927, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:06 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x2c) socket$kcm(0x29, 0x5, 0x0) r1 = socket$kcm(0x2, 0x1000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0xffffffff, 0x0, 0x3, 0x10c, 0xffffffffffffffff, 0x7}, 0x3c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f0000000440), &(0x7f0000000480)=""/61}, 0x18) 06:02:07 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8000000, 0x5, 0x0, r0, 0x0}]) 06:02:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0x7, 0xfff, 0x6, 0x3ff, 0x0, 0x10001, 0x100085, 0x2, 0x3f, 0x7, 0x14, 0xffffffffffffffff, 0x7, 0x10000, 0x400, 0x2, 0x800, 0x3, 0xd422, 0x2, 0x8, 0x0, 0xb1, 0xff, 0x3ad4, 0x3, 0x1ff, 0x1f, 0x287, 0x7, 0x5, 0x1, 0x1, 0xffffffffffff0001, 0x47a, 0x8, 0x0, 0x6ff3, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x46, 0x0, 0x7, 0x9, 0x100}) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008929, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:07 executing program 4: r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000200)) ptrace(0x10, r0) ptrace$setregset(0x18, r0, 0x200, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000000)=0x8) socketpair(0x1, 0x100000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000040)='lo:&\xb7`Q\xb1Y\xa9\xc8J,`\xd2\x98\x00\x00\x00 ') 06:02:07 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008930, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xa000000, 0x5, 0x0, r0, 0x0}]) 06:02:07 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000340)=""/246) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000000)={0x0, {0x101}}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000004) ioctl$PPPIOCSMAXCID(r1, 0x40047452, &(0x7f0000000100)) 06:02:07 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xb000000, 0x5, 0x0, r0, 0x0}]) 06:02:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008931, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:07 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:07 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="6fe0cdd2bf966e5a7945db37ff1213a9cb47d6c33f1455dae6c736d3457ad278a0a866094bf425a9908decfcdb4ebbc9dfedb7d1b8bc5adc6b3a07abd34958ea16e6dff045130938ff859e63d99cdd1412c526cacace84b4fc17c051a89f1965aec6fed3cfc2d6e930c097655c00e59fe07ca148b29d19df598ac6f8c5b564fbf2f5d6d9e678a50000000000000000000000c85928a76c18c1efd44256121607019637fa93390e357d5be2b9f5413df6df2893f37e0084a8dc6e83a0b59f547d4e158b26fc086498f18e7d583987ad80ff88d6d6c825aea7"], 0x3}}, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x101000, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x5, 0x0, 0x181, 0x2, 0x5b5}, 0x20) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) r4 = socket(0x8181bbedf0219394, 0xa, 0x1b2d) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) 06:02:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008932, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xb000200, 0x5, 0x0, r0, 0x0}]) 06:02:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008933, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/current\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000180)={0x100000000, 0x100, "7d3939c14765c1d1da8189d64ed7e0c486acf0ea62e7fd0fd7bd13fa5f4a0388", 0x8001, 0xfffffffffffffffd, 0x9, 0x1, 0x5, 0x6, 0xb655, 0x4, [0x3ea, 0x1ff, 0x1ff, 0x8]}) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) setresuid(0x0, r2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x7fff, @ipv4={[], [], @dev}}, 0x1c) 06:02:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xd000000, 0x5, 0x0, r0, 0x0}]) 06:02:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008937, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:08 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000c2000000c200000007000000000000000500000d0000000002000000020000001000000003000000020000000300000008000000050000000300000002000000040000000200000f020000000100000006000000c70a00000400000009000000070000001310020000000000000700000000060000000000000a02000000000000000080000d000000000c00000007000006040000000b000000050000000a0000000700000007000000070000000f0000000000000009000000000000800a000000010000800800000003000000000000005f30b50000"], &(0x7f00000001c0)=""/4096, 0xe3, 0x1000, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400204) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r3 = dup(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x400448c8, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x100, 0x100) ioctl$PIO_FONT(r4, 0x4b61, &(0x7f00000011c0)="93ea5f80846080f255076d4c") 06:02:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xe000000, 0x5, 0x0, r0, 0x0}]) 06:02:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008942, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:08 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008943, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xf000000, 0x5, 0x0, r0, 0x0}]) 06:02:08 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4000000043) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)=0x0) syz_open_procfs$namespace(r4, &(0x7f00000006c0)='ns/pid_for_children\x00') ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000005c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000640)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x8, 0x0, [0x7, 0x4, 0xffff, 0x3, 0x1, 0x80000000, 0x101, 0x5, 0x7, 0x5, 0xff, 0x6, 0x9, 0x22d5, 0x2, 0x7]}, {0x20, 0x0, [0xa1, 0xffffffff, 0x1000, 0x1, 0x3, 0x5, 0xd, 0x7fff, 0x8000000000000000, 0x80000001, 0x10000, 0x1, 0x2, 0x3, 0x8, 0x62]}, {0x29, 0x0, [0x20, 0x5, 0x6, 0x1, 0x9, 0x9, 0x3, 0x3, 0xee, 0xfffffffe00000, 0xfff, 0x3, 0x9, 0x1ff, 0x6, 0x4]}, {0x43, 0x0, [0x2, 0x80, 0x10000, 0x80000001, 0x2, 0x10000, 0x1, 0x3, 0x7fffffff, 0x48000000, 0x1d8, 0xb7a, 0x401, 0x2, 0x3, 0x3]}, {0x10, 0x0, [0x1000, 0x6, 0x4, 0x8, 0x38, 0x3, 0x7, 0x2, 0x10000, 0x1, 0x0, 0x9, 0x2, 0x3, 0x1ff]}, {0x0, 0x0, [0x80000000, 0x20, 0xfffffffffffffffe, 0x80, 0x1f3, 0x5, 0x7, 0x101, 0x100, 0xffffffffffff2f32, 0x80, 0x9, 0x80, 0x0, 0x4, 0x1]}, {0x4, 0x0, [0x7fffffff, 0x800, 0x5, 0x0, 0x3, 0x1, 0x5, 0x1, 0x9, 0x1, 0xc1e, 0xfffffffffffffff9, 0xff, 0x6, 0x2, 0xffff]}, {0x0, 0x0, [0x7, 0x9, 0x6, 0x7, 0x0, 0x9, 0x8, 0x0, 0xffffffffffff8626, 0x7, 0x7, 0x5, 0xfffffffffffeffff, 0x0, 0x2, 0xfeea]}, {0x1, 0x0, [0x4, 0x8001, 0x2d97, 0x2, 0x5, 0x2, 0x35, 0x59c, 0x0, 0x2, 0x1f, 0xfffffffffffffff8, 0x0, 0x3, 0x4, 0x9]}, {0x3b, 0x0, [0x2c, 0x7, 0x9, 0x0, 0x0, 0x8, 0x4, 0x80000001, 0xff, 0x3, 0x8, 0x9, 0x1000, 0x1f, 0x8000, 0x6c32]}], r5, 0x1, 0x1, 0x2d0}}, 0x20) r6 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x3, 0x400001) r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r8 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r8, 0x8038550a, 0x0) ioctl$VIDIOC_S_OUTPUT(r8, 0xc004562f, &(0x7f0000000280)=0x40000000000000) syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x5, 0x80000) ioctl$FS_IOC_FSGETXATTR(r7, 0x8038550a, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x4}) r10 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x6, 0x56c1efa2e8f27fd0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f00000001c0)={r9, 0x40000, r10}) accept4$inet(r10, &(0x7f0000000740)={0x2, 0x0, @initdev}, &(0x7f0000000780)=0x10, 0x1000) r11 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r11, 0x8038550a, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r11, 0x1, 0x1, &(0x7f0000000700)={0x4}, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr="d40a000008eb0500"}}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x98) 06:02:08 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008946, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x10000000, 0x5, 0x0, r0, 0x0}]) 06:02:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008947, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:09 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, 0x0) memfd_create(0x0, 0x0) io_setup(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf60300000000ff00}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 06:02:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x11000000, 0x5, 0x0, r0, 0x0}]) 06:02:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008948, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x20000000, 0x5, 0x0, r0, 0x0}]) [ 383.486450] overlayfs: failed to resolve './file1': -2 [ 383.545210] overlayfs: failed to resolve './file1': -2 06:02:09 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:09 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008949, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x3f000000, 0x5, 0x0, r0, 0x0}]) 06:02:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x2000080000894a, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008970, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x5, 0x0, r0, 0x0}]) 06:02:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008971, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008990, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x401f0000, 0x5, 0x0, r0, 0x0}]) 06:02:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008992, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x4d010000, 0x5, 0x0, r0, 0x0}]) 06:02:10 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008993, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000100)={r2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000140)={0x2, 0x1, [0x40, 0x8, 0x1, 0x4, 0xffffffffffff54f5, 0x8, 0x7, 0xa30]}) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x7c150000, 0x5, 0x0, r0, 0x0}]) 06:02:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x29, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000280)=0x0) clock_gettime(0x1, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000300)={{r2, r3+10000000}, {0x0, 0x989680}}, &(0x7f0000000080)) timer_getoverrun(r1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xce}}], 0x210, 0x34000, 0x0) 06:02:10 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008994, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:10 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x800) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x18dec6d14a08af43, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r4, 0xc0c85666, &(0x7f0000000240)={{0x0, @addr=0x99a}, "cbf27b4e89051d6f9b0a8c713c9eb772e027c1f26ceb0be31cd01554beaf2d92", 0x1e8c9deaa380a707}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r6, 0x8038550a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r7}}, 0xc) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000000)) 06:02:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) faccessat(r1, &(0x7f00000000c0)='./file0\x00', 0x14, 0x1c00) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) timer_gettime(0x0, &(0x7f0000000100)) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:10 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x9a020000, 0x5, 0x0, r0, 0x0}]) 06:02:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800008995, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:10 executing program 4: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/199, 0xc7}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000b40)=@broute={'broute\x00', 0x20, 0x4, 0x7c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000300), &(0x7f0000000340)=[{}, {0x0, '\x00', 0x0, 0x7fffffffffffffff, 0x2, [{0x5, 0x40, 0xdcd3, 'bond_slave_1\x00', 'veth1_to_team\x00', 'syz_tun\x00', 'hsr0\x00', @remote, [0x7cdf8e759979029a, 0xff, 0x101, 0x101, 0x0, 0xff], @dev={[], 0xe}, [0x7f, 0x0, 0xff], 0xae, 0xfe, 0x12e, [@connbytes={'connbytes\x00', 0x18, {{0x2638, 0x3, 0x0, 0x3}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xce85, 'syz0\x00', 0x80}}}], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x20}}}}, {0x9, 0x1, 0x3, 'veth1_to_bond\x00', 'nlmon0\x00', 'syz_tun\x00', 'ip6gre0\x00', @broadcast, [0xff, 0x7f, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x20}, [0x0, 0x0, 0xff, 0x0, 0x101, 0x7f], 0x11e, 0x186, 0x1be, [@realm={'realm\x00', 0x10, {{0x9, 0xffffffffffffb7d3, 0x1}}}, @ip6={'ip6\x00', 0x50, {{@dev={0xfe, 0x80, [], 0x24}, @empty, [0x7e00007e, 0xff000000, 0xff, 0xffffffff], [0xffffff00, 0xff0000ff, 0x0, 0x80000000], 0x80000001, 0x32, 0x10, 0x0, 0x4e21, 0x4e22, 0x4e21, 0x4e22}}}], [@common=@mark={'mark\x00', 0x10, {{0x30, 0xfffffffffffffffe}}}, @common=@AUDIT={'AUDIT\x00', 0x8}], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xd317ca948b7aecde}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0x41, 0xf8, 'nr0\x00', 'batadv0\x00', 'vcan0\x00', 'yam0\x00', @empty, [0x1fe, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0x0, 0x0, 0x0, 0xff], 0x2a6, 0x356, 0x38e, [@bpf0={'bpf\x00', 0x210, {{0x3, [{0x7f, 0x4, 0x4, 0x1}, {0x3, 0x20, 0x7f, 0x8}, {0x0, 0x8, 0x49b4, 0xfa77}, {0xfffffffffffffffd, 0x8, 0x7ff, 0x100000000}, {0x50, 0x2, 0x1, 0xff}, {0x6fc, 0x100000000, 0x9, 0x3f}, {0x9, 0xffffffffffffffe0, 0x1, 0x3}, {0x6181, 0x7, 0x0, 0x9}, {0x4, 0x101, 0x6, 0x7}, {0x0, 0x8, 0x80, 0x1}, {0x4, 0x1dc0000000000, 0x7, 0x200}, {0x0, 0xfff, 0xffff}, {0x6, 0x8000, 0x9, 0x6}, {0xffffffffc097bf54, 0x10001, 0x6, 0x51e6}, {0x44, 0xfe17, 0x7, 0x300}, {0x101, 0xfffffffffffffffa, 0x2}, {0x2, 0xfffffffffffffffa, 0x7fff, 0x8001}, {0x5c0, 0xff, 0x5, 0x3c}, {0xffffffff, 0x5, 0x9, 0x1000}, {0x4, 0xbdd, 0xfff, 0x4}, {0x5, 0x2, 0x9, 0x3}, {0x6, 0x8, 0x3, 0x2}, {0x1000, 0x78, 0x9, 0x7}, {0x101, 0x3bb7, 0x1, 0xffff}, {0x1ff, 0x4, 0x6, 0x1}, {0x5b53, 0x4, 0x7, 0x8}, {0x4, 0x1, 0x0, 0x1}, {0x4, 0x2, 0xfffffffffffffff9, 0xb99}, {0xf1, 0x0, 0x7, 0x3}, {0x7, 0x895, 0x27, 0xfffffffffffffffd}, {0x202c, 0x214, 0xc7, 0x4}, {0x10000, 0xe86f, 0x32, 0x4}, {0x2020, 0x6, 0x100000001, 0x1}, {0x95f7, 0x1}, {0x1, 0x80000000, 0x80000000, 0x9}, {0xba, 0x4, 0xe4, 0x5}, {0x2, 0x9, 0xfa, 0x7}, {0xf1, 0x2, 0x101, 0x1}, {0x9, 0x8, 0x1808c5c1, 0x4000000000000000}, {0x81, 0x4, 0x7, 0x2}, {0x5, 0xfe, 0x3ff, 0x5}, {0x8, 0x5, 0x0, 0x6}, {0x3, 0x0, 0x2, 0x8}, {0x7fffffff, 0x6, 0x5, 0x80}, {0x8, 0x6e, 0xd8}, {0xd2c, 0x400, 0x3, 0x5a5}, {0x1, 0x2, 0x401, 0x40}, {0x4, 0x9, 0x6, 0x26cf}, {0xc0, 0x10000, 0xac4, 0x9}, {0x0, 0x2, 0x7ff, 0x8001}, {0x80000001, 0x6, 0x8, 0x9}, {0x9, 0x7, 0x1, 0x7}, {0x6, 0x5, 0x4, 0x1ff}, {0x30, 0x5, 0x100000000, 0x8}, {0x8, 0x81, 0x2, 0x4}, {0x963e, 0x0, 0x3ff, 0xffac}, {0x1, 0x0, 0x3, 0xfffffffffffffffa}, {0x0, 0x9, 0x1, 0x7}, {0x80000001, 0x3, 0x4, 0x5a2c}, {0xf49, 0x1ff, 0x2, 0x8}, {0x5, 0x0, 0x7ff, 0x5}, {0xfffffffffffffff9, 0xe7, 0x1ff, 0x200}, {0xed0f, 0x0, 0xff, 0x1}, {0x9, 0x2, 0x3, 0xfc000000}], 0x2}}}], [@common=@dnat={'dnat\x00', 0x10, {{@dev={[], 0x19}, 0xfffffffffffffffd}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x4, 0x6, 0x401, 0x0, 0x0, "33d442544f8a39a77b70afb81a2b8b80e8d0b83b374de9fc4bbe5757ec7e5041bfd9337a272da12e519a83c4f13cd5a659ec7a1ab1f943c9409b6e58d022a7b4"}}}], @common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}}, {0xa, 0x20, 0x19, 'ip6tnl0\x00', 'syz_tun\x00', 'ipddp0\x00', 'veth0_to_team\x00', @remote, [0x0, 0x101, 0x1fe, 0xff], @random="ab8cf1f9e7a2", [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0x6e, 0xbe, [], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7fffffff, 'syz0\x00', 0x42}}}}]}]}, 0x840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0xa00, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r3, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10001050}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x4, 0x80, 0x7}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xb8939895cb6a9197}, 0x88001) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000000), 0x2b) 06:02:10 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000140)={0x2, 0x1, 0xf000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x1, 0x4) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:10 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="11dc050062a900007b89382985ab8ac76067e279c479d319f078") setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089a2, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:11 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3, 0x10200) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x200000000000000, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000140)={0x852f, 0x0, 0x401, 0x1ff, 0x8}, 0x14) r3 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r3, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:11 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xfeffffff, 0x5, 0x0, r0, 0x0}]) 06:02:11 executing program 4: r0 = syz_open_dev$usb(&(0x7f00000000c0)='~dev/0#\x00\x00\x00\x00\x00\x03\x00\x00\xde\xc3\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) prctl$PR_SET_THP_DISABLE(0x29, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trus\xac\xfaTRp\x9e\xc2Qmay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0xa7, 0x1, 0x4, "e082dfe87e1069b1b8ff3c743a71846d", "1f74f2feff488edb24cde4afe91b560cfcfefe8c000bfa765a00010000000000008a81a6a779a8c5d8ab9fe69bf44cd71bda721cca4b28a6f9b87764a134fbdd0ed01c5e194289658bad6e4fa6afb37d0d88740f4c2a2ffe1cb83f4c2ecd2a162e45c6e6db71465a5083ada0afe46420592019ea269f313cf8814857c122ecc424624fd17be08f5b88106814779ed593885e"}, 0xffffffffffffff08, 0x1) 06:02:11 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) socket$inet_udplite(0x2, 0x2, 0x88) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089a3, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) write$FUSE_POLL(r1, &(0x7f00000000c0)={0x18, 0x0, 0x8, {0x200}}, 0x18) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:11 executing program 4: get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x4, &(0x7f0000ff6000/0xa000)=nil, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000380), 0x2, &(0x7f00000003c0)=""/116, 0x74}, 0x401}, {{&(0x7f0000000440)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)}], 0x1, &(0x7f0000000540)=""/155, 0x9b}, 0xaa28}, {{&(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/16, 0x10}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/130, 0x82}, {&(0x7f0000000800)=""/38, 0x26}, {&(0x7f0000000840)=""/71, 0x47}, {&(0x7f00000008c0)=""/250, 0xfa}], 0x6, &(0x7f0000000a40)=""/2, 0x2}, 0x3}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000007980)=[{&(0x7f0000006980)=""/4096}, {&(0x7f0000006680)=""/59}], 0x0, &(0x7f0000000b40)=""/85, 0x55}}, {{&(0x7f0000000bc0)=@nfc, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000c40)=""/78, 0x4e}, {&(0x7f0000000cc0)=""/232, 0xe8}, {&(0x7f0000000dc0)=""/233, 0xe9}, {&(0x7f0000000ec0)=""/230, 0xe6}, {&(0x7f0000000fc0)=""/91, 0x5b}, {&(0x7f0000001040)=""/81, 0x51}], 0x6, &(0x7f0000001140)=""/159, 0x9f}, 0xfff}, {{&(0x7f0000001200)=@isdn, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/79, 0x4f}, {&(0x7f0000001300)=""/139, 0x8b}, {&(0x7f00000013c0)=""/99, 0x63}, {&(0x7f0000001440)=""/68, 0x44}], 0x4, &(0x7f0000001500)=""/56, 0x38}, 0x1}, {{&(0x7f0000001540)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000003940)=[{&(0x7f00000015c0)=""/91, 0x5b}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/145, 0x91}, {&(0x7f0000002700)=""/61, 0x3d}, {&(0x7f0000002740)=""/5, 0x5}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/101, 0x65}, {&(0x7f0000003800)=""/74, 0x4a}, {&(0x7f0000003880)=""/162, 0xa2}], 0x9, &(0x7f0000003a00)=""/56, 0x38}, 0x8}, {{&(0x7f0000003a40), 0x80, &(0x7f0000004c00)=[{&(0x7f0000003ac0)=""/34, 0x22}, {&(0x7f0000003b00)=""/104, 0x68}, {&(0x7f0000003b80)=""/21, 0x15}, {&(0x7f0000003bc0)=""/10, 0xa}, {&(0x7f0000003c00)=""/4096, 0x1000}], 0x5, &(0x7f0000004c80)=""/99, 0x2c}, 0x4}, {{&(0x7f0000004d00)=@ax25={{0x3, @rose}, [@default, @remote, @rose, @rose, @netrom, @bcast, @remote, @null]}, 0x80, &(0x7f0000005080)=[{&(0x7f0000004d80)=""/134, 0x86}, {&(0x7f0000004e40)=""/145, 0x91}, {&(0x7f0000004f00)=""/106, 0x6a}, {&(0x7f0000004f80)=""/196, 0xc4}], 0x4}, 0x80}, {{&(0x7f00000050c0)=@sco, 0x80, &(0x7f0000006600)=[{&(0x7f0000005140)=""/6, 0x6}, {&(0x7f0000005180)=""/213, 0xd5}, {&(0x7f0000005280)=""/97, 0x61}, {&(0x7f0000005300)=""/15, 0xf}, {&(0x7f0000005340)=""/131, 0x83}, {&(0x7f0000005400)=""/4096, 0x1000}, {&(0x7f0000006400)=""/212, 0xd4}, {&(0x7f0000006500)=""/228, 0xe4}], 0x8, &(0x7f0000006680), 0xfffffffb}, 0x401}], 0xa, 0x1, &(0x7f0000006940)={0x0, 0x1c9c380}) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000000c0)={0x800, 0x9, 0x10000, 'queue1\x00', 0xbd54}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000b00)={r4, 0x6}, 0x8) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0xa7ed, 0x4, 0x0) 06:02:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[0x9, 0x4, 0x6, 0x4]}) 06:02:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089b0, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xffffff7f, 0x5, 0x0, r0, 0x0}]) 06:02:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r3) fcntl$setpipe(r3, 0x407, 0x7ff) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x3, 0x7, 0x4, 0x1, 0x8, 0x0, 0x3}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0x1, 0x7bf, 0xffffffffffff7fff}) 06:02:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089b1, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:12 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x5, 0x0, r0, 0x0}]) 06:02:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000840049409, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:12 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&0&&!\n\x04\x00\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x200000000000010e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x70) recvmmsg(r2, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400300, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={r7, 0x7ff, 0x0, 0x4, 0xac97}, &(0x7f0000000100)=0x18) 06:02:12 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000840086602, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000840087602, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x3f99d1493d, 0x5, 0x0, r0, 0x0}]) 06:02:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x2000084020940d, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:12 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r3}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001140)={r3, 0x2}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = msgget(0x0, 0x400) msgctl$MSG_STAT(r4, 0xb, &(0x7f0000000100)=""/4096) msgctl$IPC_RMID(r4, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, &(0x7f00000000c0)) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') r6 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x492242) ioctl$FS_IOC_FSGETXATTR(r6, 0x8038550a, 0x0) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000000)={0xf000, 0x2, 0x27, 0x1007, 0x3}) 06:02:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x10000000000, 0x5, 0x0, r0, 0x0}]) 06:02:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000880086601, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:13 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000880087601, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x7d0000000000, 0x5, 0x0, r0, 0x0}]) 06:02:13 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r2) r3 = dup2(r2, 0xffffffffffffffff) ioctl$KDGETLED(r3, 0x4b31, &(0x7f00000000c0)) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0xc0045878, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x10000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008c0045878, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x400100, 0x0) write$sndseq(r1, &(0x7f0000000100)=[{0x400, 0x6, 0x3f, 0x401, @time, {0x3, 0x20}, {0x400, 0x7f}, @raw32={[0x1, 0xf1e, 0x2]}}], 0x30) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x25f, &(0x7f0000000180), 0x30, 0x4000}, 0x82) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:13 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00004e7000)={0x2, 0x70, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000400)='cpu&0&&!\n\x04\x00\x00\x00\x01\x9c\xd3\x0e5\xa0\x1d=\x04\n\x1c`fo\x8d\xccm\\v\xfd.\x9e\tbk1\xde\xea\x1b\r;\x81\x84\x87-X\xb6,\xc5\xb4\"7\"\xb5yt\x82\xfb\x1d\x83\xf8.- \x00\x00\x00(\xe9`D\x01i\\\x8dl\x86lh\xa8\xfc\x80\xde,Kt\xf4#\xc5]Y;\xc16v\xf9\x89\t\x06\xbe*\xaa&\xbd\x16xQ\x8e\xf3\xd6\x1a\xfd\xd0\x04\'y\x9b|\xe4\xb7\bE\xed\x97\x80s\x19W\xb7[\xf0%>MM\xf5\x98\xbe^=q!\xa6\x0fp\x012\x00\xbb\xbe\x9dX5\xafep\x10R\v&\xaf\xa8$\x7f7V\xedLJ4\xcf\a\x01\xd5T\n\xca\xc2\x86_\xc1\xce\x8d\xedbS\x8d\xe9t\x82\xf41zwr\xe6o\x88\xe5\xe3\xe7Gcx\xc0\x91I\x01\x00\x00\x00\x01\x00\x00\x00K\x9e\xe5[\xa0\n\x0f\x04\xa6\xb0sE)\x8a\xd0R\xc3\xc1,b \x1c#IRz6\xfeJ~\xda\xd7_\xfe\x1f\xe5\x86\xb1xu&\xfb\xf2\xbf\xe8\x7f\x91\x93\xab\x05\x004\x85\x86l\x8d\x00'/289) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x200000000000010e, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x0, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x10}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x70) recvmmsg(r2, &(0x7f00000000c0), 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x400300, 0x0) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={r7, 0x7ff, 0x0, 0x4, 0xac97}, &(0x7f0000000100)=0x18) 06:02:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008c0189436, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:13 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) pipe2(&(0x7f0000000140), 0x80000) socketpair$tipc(0x1e, 0x6a6259fc41c7f35b, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000100)={0x4}) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) clone(0x8000, &(0x7f00000001c0)="e0fa9f8242f5894f834a5e2cfed9da36026de3fd0cfb6813a76fca24b30bb568611d5309274bcbb3d9e68ce5f49e61d4ff270dfa5024882e1908f8058ea663b6082726224122bdb82216e7de0a4787f8ffa167ef4ed84509832086a7689cef3935a1ef4e82d5380bec34c836412735b3912ad1d70591aba0e5179e41f1e205eddb9bfd0ff20c1573d892c5c0988344e0558b95c6829ae86af56c8ba37b588f4a1414c13415ac", &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)="aac5a90770f28a92c9446bb750f5ffa1b67589504f777ebafa2f07f8493dafdf24d851f1926a5cd73e8ca90f463e641c6344c53e0a924c569793b7a84d3794202b6ec233d4f08a50105d978eea3f40453db7083aa28eae403f15662fe39ba6bffb023c63e9f874d6ba40ea136998dd03723f0077a665ba474404557be0eb28b007634eb05c05d9ae40b7a4a3825cdb8a87c9c141775555f44bd816ed51e137a0279c2067abaaef0c940539c0c33c9cd641d4334241d72339c4b823088e02a4e4666d01") write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:14 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x20000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008c020660b, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:14 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0xffffffffffffff69) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x04\x005\x00', @ifru_flags}) 06:02:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xd0070000000000, 0x5, 0x0, r0, 0x0}]) 06:02:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(0xffffffffffffffff, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x00\x045\x00', @ifru_flags}) 06:02:14 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7f, 0x580) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000240)={0x2, 0xc, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, [@sadb_key={0xf, 0x8, 0x750, 0x0, "23575618bd39cdb325559cb4b2520d77e53ea2f5b63225a23ddad15bf85a92cb9342f7fda74c64e1eb07cceb4fb33cd646489ee22a796dce5f49b9aaf6bcc7a1644ab311547a9e3ffefd0a70377b43500a4355387b89bb39906993f577baa9bae7add73f8c2ee3ebc70f7ff68a38c7b59d1b70d1a03c9064c2d3c137136af8fb36dd9a55f24e9e505b6215d40b54aaf1469371f25b64801d9fba69819735a4095ff2f36349dd7fe1dc78f01e5030bc5ce075cd4554daa21ea2923120f3be6561182fe87a02dbac01a5c834a7c9985d0381c8605443e87c69544e59dadeecdf10322071c7b80f6ba9c961"}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x80, @ipv4={[], [], @multicast2}, 0x80000001}}]}, 0x140}}, 0x0) 06:02:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x100000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:14 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x2, 0x0, &(0x7f0000000080)) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700), 0x0, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="b587f4e6fa973a45cf692e93268fc70f3aed384298633d0c899ac4546c238953c776bc17d8ad14cf139c0ccfe4be2464596f42e76d203d2345f4c148f739a5bfb574b53aad881838098245e20c2e6c2c067474671ad109d4306cac2e06b1ced5b8ce7b979067cc9574958d98d9b90bb9e05d", 0x72}, {&(0x7f0000000300)="f7caed10f16d31fae65a38ad2038a9cc8ec1b453c2b6b4abf17f26c907e779b3dac026ed1b560cc58e298f9c47c001588db37cb1fd9489425ab6ac064199975a66cc0ff975e2db031f83c70c5403888e9982e31112f91ec6a9fea61085f62f35b56ff1868080bbffbf77c0d56bed2edf183fb4c9f0c2137f5e50fbf4061e33c5ded99ef871123e4a4a141edb481baf9c6b0a99d9c65cfa5dfa97e9b0bde4187b56f1a210213ffed5eacb73c523389b4242082d81d13667662fba67910e3f9f739bf3cacabbe558411b96b58a490b4b4ad06688b16d410253e4d096b4aaeacfb61b459a5cd442d68ade", 0xe9}, {&(0x7f0000000400)="f8abb8fe6f343b8deca95d3309b3668cc0090f936c90be8750f621bd97ccf6fa32566cfcea05901c20d52e6047ce6f8627fb3e35eff3272b90ba1f38bf047261a337ceb4f16652d75d0cfcf165700a8a6fb678bc6dab2bd582c47612fa9126579958b7ad066a1b36b6a75f9a66494c61b109559ac608bdde6cb80c5a8d3a797d1071d2fa96237d703fc491fdfbca3cd54813ac9bfe6aff9e72672a4a7104997054de48c6165f5111a1dedfa3162ef3db910fb1b6be435e912ec95477f71a3e74c25050a94e", 0xc5}], 0x3, &(0x7f0000000500)=[@assoc={0x18, 0x117, 0x4, 0x200000}, @op={0x18}, @op={0x18}, @op={0x18}], 0x60, 0x2000c029}, 0x0) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) ioctl$EVIOCGSW(r3, 0x8040451b, &(0x7f00000000c0)=""/92) 06:02:14 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x04\x00\x005\x00', @ifru_flags}) 06:02:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x200000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:14 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000000)=@null) sendmmsg(r1, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0) 06:02:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x04\x005\x00', @ifru_flags}) 06:02:14 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x300000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00@\x00', @ifru_flags}) 06:02:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x400000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00v\x00', @ifru_flags}) 06:02:15 executing program 4: clone(0x3102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000001000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x800000204000, @empty}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x5c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r1, r2, 0x0) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000740)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r4, 0x111, 0x2, 0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r5 = syz_open_dev$loop(&(0x7f0000000000)='/\x00', 0xa, 0x0) fdatasync(r5) dup(r5) setsockopt$inet_int(r0, 0x0, 0x40, &(0x7f0000000ffc), 0x4) r6 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x31b705) ioctl$FS_IOC_FSGETXATTR(r6, 0x8038550a, 0x0) write$selinux_context(r6, &(0x7f0000000040)='system_u:object_r:inetd_log_t:s0\x00', 0x21) socket$rds(0x15, 0x5, 0x0) 06:02:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x123) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x30080, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40020}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:15 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:15 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400) preadv(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/164, 0xa4}, {&(0x7f00000003c0)=""/108, 0x6c}], 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='\x00\x00\x00\x00\x00\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a;\xea;P\xb5w_2\f\xe5\xcc`\xa0\xce\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf08\xa6D\x97\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xc9\x82)\xc8]\xbeqAq\xdfi\x9f\xa7_b\xe0\xa6u.\x1c\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\f\x9a\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x930xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x500000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0xffffffffffffff62) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xffffffffffffffa0, &(0x7f0000000300)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @iv={0x0, 0x117, 0x2, 0x0, "52edd5f4c2e1ebdf6ec7f488cd8f5fad106618e276548fee81f141e27b1c5ae268d894e64edc031b494e3443eeea414236680816f5bb4b2d400f75b10541f65d4624dddba1d44a78eceb135ce5516e6496d1139a34cb83a1c9a9994a8c281eebc2fd5b248e2eb573e84d85e60593feeb534d9270616eb3016b259c3c3486abb8931e73bfb255fe0f239fa108d1b1ed06dee1dd418d00"/159}], 0x30, 0xc4c0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0xd, &(0x7f00000001c0)=0x0) connect$can_bcm(r5, &(0x7f0000000140), 0x10) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}]) io_destroy(r6) write$binfmt_script(r4, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r4, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x6}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:15 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00@\x00', @ifru_flags}) 06:02:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x600000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0xfa, @mcast1, 0x5}}, 0x3, 0x2, 0xffff, 0x9, 0x1}, &(0x7f00000001c0)=0x98) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:15 executing program 4: r0 = socket$inet(0x2, 0x2000000000003, 0x2) setsockopt$inet_int(r0, 0x1f00000000000000, 0xd3, &(0x7f0000000000), 0x3c) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) read$char_usb(r1, &(0x7f0000000040)=""/193, 0xc1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r4, 0x101}, &(0x7f0000000180)=0x8) 06:02:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\xf0P\x00', @ifru_flags}) 06:02:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x700000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:16 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r3, 0x65, 0x2, 0x0, &(0x7f0000000080)) connect$l2tp(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x3, 0x3, {0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3ff}}}, 0x3a) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/exec\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00qp\x00', @ifru_flags}) 06:02:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x800000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\xe0p\x00', @ifru_flags}) [ 390.857303] audit: type=1400 audit(1569045736.591:92): avc: denied { map } for pid=19270 comm="syz-executor.1" path="/proc/19270/attr/exec" dev="proc" ino=64688 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 06:02:16 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700), 0x0, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)) 06:02:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xa00000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00pq\x00', @ifru_flags}) 06:02:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xb00000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:16 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00v\x00', @ifru_flags}) 06:02:16 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r2) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f00000000c0)={0x3, 0x6}) 06:02:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:17 executing program 4: write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "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", 0x1000}, 0x1006) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x18, &(0x7f0000000200)) ptrace(0x10, r1) ptrace$setregset(0x18, r1, 0x200, 0x0) ptrace$peek(0x1, r1, &(0x7f0000000040)) r2 = perf_event_open(&(0x7f000025c000)={0x1, 0x16e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x575) fanotify_mark(r0, 0x0, 0x28000028, r0, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x931, 0xfa00, {0x2, &(0x7f0000000300), 0x2, 0x8}}, 0xfffffffffffffff9) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) ioctl$RTC_ALM_READ(r3, 0x80247008, &(0x7f0000000080)) 06:02:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x96\x00', @ifru_flags}) 06:02:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x40002013, &(0x7f00000000c0)={0x0, 0x989680}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r5, 0x2, 0xc95, 0xa5a3, 0xffff, 0x3c3fce0}, 0x14) 06:02:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xb00020000000000, 0x5, 0x0, r0, 0x0}]) 06:02:17 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00p\xe0\x00', @ifru_flags}) 06:02:17 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600e3ff00000000000000000003000300ccf40000000000003800000000000000000000000000200001000000000000010000000003000000000000000100000000000000030000000000f3ffff8ff6b6ffffeffe"], 0x58) execveat(r0, &(0x7f0000000080)='\x00', 0x0, 0x0, 0x1000) 06:02:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xd00000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:17 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00P\xf0\x00', @ifru_flags}) 06:02:17 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) sendmmsg$inet(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="8c2fb08f70aca1f2e24e7dc4636db1607852800ad7239bfbb123065f680fcd8bd0da6e13b662424ccd67943bc81a1d56defee801abbb295542689614ad3cf075062ecc8fff703998f05b4a75cd21c51a0cdf5c1d22ec6c88b2f328c35d2284ce37375165fc7b892d9211b9f2b8d60d65de6a11b376b8379dea0e24d9d54997f9b0c35fdbb691b6a85b1dd235877eaf2c6b56cdebc12feefdd198891969cc07ec80aa29bcc95a7fa0866e97a784c0ac21edab15d06cfb51b0f47e5f4404", 0xbd}, {&(0x7f0000000340)="4520d8c105000000ee293229", 0x139}], 0x2}}], 0x4000336, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000380)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) sendto$inet(r0, &(0x7f0000000280)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x4d, 0x11, 0x0, 0x0) 06:02:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00@\x00', @ifru_flags}) 06:02:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xe00000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffffffffe22, &(0x7f0000000180)=[@op, @op={0xfffffffffffffd73, 0x117, 0x3, 0x1}], 0xfcde}, 0x4000080) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:18 executing program 0: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:18 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00v\x00', @ifru_flags}) 06:02:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xf00000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:18 executing program 4: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x400020323, 0x0, 0x0, 0x0, 0xffff}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 06:02:18 executing program 0: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x18, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "a4563fdb4eaf7f03"}, 0x5}}]}, 0x2c}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) connect$rds(r1, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r4) ioctl$FS_IOC_GETFSLABEL(r4, 0x81009431, &(0x7f0000000700)) write$binfmt_script(r3, &(0x7f0000000600)=ANY=[], 0xfec8) ioctl$PPPIOCGNPMODE(0xffffffffffffffff, 0xc008744c, &(0x7f00000006c0)={0x8057, 0x2}) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000640)=[{{&(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/161}, {&(0x7f0000000300)=""/186, 0x1b5}, {&(0x7f0000000280)=""/10}, {&(0x7f00000003c0)=""/255}, {&(0x7f00000004c0)=""/74, 0xfffffeec}], 0x0, &(0x7f00000005c0)=""/77}, 0x7}], 0x40000000000019c, 0x40002000, &(0x7f0000008000)={r5, r6+30000000}) 06:02:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\xff\xef\xff\xff\xff\x7f\x00', @ifru_flags}) 06:02:18 executing program 0: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) [ 392.805336] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 392.843744] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub 06:02:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040000}, 0x20008054) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000a80)) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) r2 = accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f0000000140)=0x60, 0x50be8185d9fc5455) sendmmsg$nfc_llcp(r2, &(0x7f0000004e40)=[{&(0x7f0000000240)={0x27, 0x0, 0x1, 0x3, 0x8, 0x7fffffff, "97123ca628806244c9fba85c33a6359bb8a52ce560b93bf8717255d89854d063711b32cbee0346c5324d6eaffe5d0af146a35655a8846e01e96d1ba314b025", 0x2f}, 0x60, &(0x7f0000000180)=[{&(0x7f00000002c0)="b93caec407d677a246625c2788fbf8062c76ff72c6a63d157f793558e875ce7db7dd7302da159ac24a5add137e92f40e474477d4cc475c595c63dba7e5f6c6d403379507658d1e0f6a4ba761f4a05feadfcfdc3f0c8614e91f6ce2272636bb6811f2cd7427a591efd386abc5f07f6964c5a27ded36ac9bfb011cc1d6bfeb", 0x7e}, {&(0x7f0000000340)="c9e681fa1c29a24779b1dbc7c8255faf86d1bcb5dac05fa615ebd5ca123e8a28277273296df5fce77dc01928a6c6a1833bda3526335cd84c3ffa7e14718bfc84e4eedb9376011284b03fecbd6e4b590229429d9344846027974f8adfb2a77e3a56acc1a11352710d6dcf44a07e7a2d012f8f575166994994f6a023f37df4b7c28adc50c64529abb481ca4cd2c9fc78f546993755e6b9e87e93d5cf993aabad3f4a11661eed76e5f895372578a238330d51268dd62803e2dbecc38a381f906aa9c5a9401589b2bc516e28906ed55967c851f1b4d7470e324ef2fb14f5cb", 0xdd}], 0x2, &(0x7f0000000440)={0xc8, 0x343, 0x31fe, "246c485950ecf5a6d5f729f0ce7429b3cf064cfe37647739bf0336763c5cb4490b981b1b2087494783b5682aeecae5bda7ef988c3945bad6c3a9436e173a665b6e46d8b5dd76f0de6667f8936f49d6c880e6981cf1ef935538fe9f494230f162823922440255cdb75e8c1c2ffbbba10b2cfa1a1fc0690ee9a7fa7a6d75fe88bc387a1d9f2c23c6254be2ca4659c1cfce611a894ba2f0f9845d586652dc012d909cc5a5d529edcfd30e8be5cede4c10c70aac00"}, 0xc8, 0x20000}, {&(0x7f0000000540)={0x27, 0x0, 0x0, 0x0, 0x9, 0x0, "c69cf447bd41094bf75313a37615f88a4fea5595ab1a8310eed219ec6e475245371e28d93900e11c6009cd722beaa88bbe56d92d31fba403a832b38dd025b9", 0x31}, 0x60, &(0x7f00000007c0)=[{&(0x7f00000005c0)="c90558ce6d821e9d5155a9f678eaf86093d05b6dd5d50d16f01c7910018b59ae6d6068b27dca1adc2be5c4d30c7a32caad9d7a626914554509c132dec46102", 0x3f}, {&(0x7f0000000600)="7eda4519fb1df8b988e2e9a815bf0ba778be33321ad086b44ab723429233937cdea4e2f72d8e262e83dafe58796149fa82242f0941d7d641595e9f6e3a7e836f8570dc1791c9be9bdcf5c8cf17c68014586eb37c1d682bc36e88e656329840f51c011616802b39fc65d8f2d67163019618656050d8a864b080d84f36ea0e3c13b0725175110a14d24770485a3dae6bdf443868e86a7ab3bdbb9b1164fed5663fbb1c16bd115f78835493161f98b8c0d0", 0xb0}, {&(0x7f00000006c0)="c6f0bc33c49313dc7836113a43efc080c1b55de42f7ae16d5c74471711138a1d5f7d33931c421e654e7697599c79bc717d", 0x31}, {&(0x7f0000000700)="7c320ec8e958cfd200ef3b0666f08b904f510d2d5c6728718395a35338897ef9d8c87fdcfbc57aaba8b3b4518175b0670352a3fd09305f068e5de0e922fc008d2da3e2435c874d0a56252212f93294ea95755b90dbcf6a40b0617ab79e5217a05627f17a905dced3bb6e25ba1f48832c41d5ff3acb24e57ddfa1749dae38be7458bd89a7a7bf4182e8ef966f8b1408e8727682771efa38884d79e2acb911a876c6ca0924f226e492", 0xa8}], 0x4, &(0x7f0000000800)={0x90, 0x189, 0x1, "6a290647347b42bd69bb21e803e09ff64864cdfc568f4a2374fb7622cfc837dd9ce8d8b637234855503f219aee049801dfe3073d03bea8dc828d85e4716dd266fb691fc979004381ee5c0bd395c9dc90baa195ab7dafd009850080f3d3015b9156c9683862948e3982059afd81206574b1e82f1faee39f737d"}, 0x90, 0x20000005}, {&(0x7f00000008c0)={0x27, 0x1, 0x2, 0x2, 0x0, 0x0, "08ba13cb8e0de45bd9d334eb537d02477e5296b33fb53c403db423bea7508a2f8cf59dd4a7b87fbf72be0fe0cb3ada52bd618cd18e9d1a3b376b4c74daf17f", 0x1c}, 0x60, &(0x7f0000003c00)=[{&(0x7f0000000940)="775f70aa53180a492f55f836da77a660bc5d37c721dae71ea624b0603eb1455011538044d5bcf85e7a4d28908caffb66d1e885d15f4f43fd39b15e9cd3c92ea0750ca92a184973315919481791ef4ccae7c392dc4c169e64528a432dbdfe1d00c009a9fb0898add15f", 0x69}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="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", 0x1000}, {&(0x7f0000003b00)="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", 0xfd}, {&(0x7f00000009c0)="469682409e4ab1d1360037f6a55c151a648b9876c1701dc23bd7493412d277f0a63cd088548cd427553c363a256089356bc4fe5b8dca3c64c4123ba3d7a58eb4e831fbbdf25d612db61238622dc6ff83dea1ee787af2ee5bcb", 0x59}], 0x5, 0x0, 0x0, 0x80004}, {&(0x7f0000003c80)={0x27, 0x0, 0x0, 0x5, 0x3, 0xffffffffffffff85, "da0b50c7caa1d268abf5b8fec9cd82a17944f7813f1b8ad702b027762738568a59be2d567ebeed631a89c7770f81bcb9f076f0512225629a098b88bae02766", 0x3a}, 0x60, &(0x7f0000000a40)=[{&(0x7f0000003d00)="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", 0x1000}, {&(0x7f0000004d00)="36f06b0740e324be7bdb34dd268575569a40f25b6a8eaef84a6e65472694880eb28e2b50c7facccbf21d48bdd5897ccfd72fd89d044748facca33c3d8e9095c61f48fd5f9d865c9543852e0cafea787b383e88acaedd80b82332c0495150258ad45c15831d76476ec05acd9b14c90bcbe54d565424733ceb34804bdfccf9d07733f39279633e9317cc8ed3ea247543e6d8dba33e655f45f12137ca5e6837a1f56f19d8e6afc3ea041d1fb47319fc9181b59628a616495e6fb9", 0xb9}], 0x2, &(0x7f0000004dc0)={0x68, 0x1fd, 0x1, "b364e7087cc8bc264b1d328c730a5fbf548df21dad4175a9b2163a9953f86ca2255a40abb3b6b3b314100902d4f0a30ab9c7e99278a3fc2a7defa19a7cc18f07f45a926f7737f8b31c202d39fe055a6cda13cd25aa296315"}, 0x68, 0x20000000}], 0x4, 0x40000) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000ac0)={0x8, "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", 0x1000}, 0x1006) r4 = syz_open_pts(r0, 0x0) readv(r4, &(0x7f00000001c0), 0xa5) r5 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, 0x0) ioctl$TIOCGLCKTRMIOS(r5, 0x5456, &(0x7f0000000000)={0x3e3f, 0x5, 0xadd, 0x0, 0x8, 0xfffffffffffffff8, 0x8000, 0xbd46, 0xffffffff7fffffff, 0x5, 0x200000050, 0x4}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xffffffffffffffff}) 06:02:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x1000000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r2) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000240)={0x2a, 0x29, 0x2, {0x3e57, [{{0x18, 0x3, 0x4}, 0x5, 0x800, 0x7, './file0'}]}}, 0x2a) syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0x41395527) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xff}, &(0x7f0000000200)={0x0, r7+30000000}, 0x0) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fdatasync(r3) r8 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r8) write$binfmt_script(r1, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYRESHEX=r2, @ANYBLOB="3c8a93c39d1681ffab91b726b8d2385d153164fbfc85739c7312315c577023c977f2b43084eb0f10fda2ef45a7d157b8f43453094689c770218d2daebaecd2fba151649d7b3e073e80e4a6a76ab306d946fa754b0f8d06afa16153135165352b699afd4b34427c3c21b9317bad28627b7fb0bba70e3e84e434428db2abd44df5fd1bbe7dab28416aba448d3e0ce11ea5196640b04fcceafdbf78ad9cd2cd299aa0785b9fcdbe35c8152d1fa138dd80ef52976103b2986130b0fdd3de9748e151bed4554a02e7c43017d4ce598562c1145664ec2d39bf36489288aa3c3c930671b5d20a8455c6e48b23e99137548fcee55fe7efe99f8ce8b33d1b23a73f932012c8244a6694b605e61d3ffb0a23dfff5169ddaa4c59768d59c6de7627e89c1d709a7096dc1945c396f9a72fe9170893ab823868bf02", @ANYRES16], @ANYRES32, @ANYRES16=r2, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRES16], @ANYRESOCT=r8], 0xbf2) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:18 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:19 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:19 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2000) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x3ff, 0x400, 0x401, 0x80000001, 0x16, 0x6, 0x80000000, 0x6380000000000000, 0x0, 0x3, 0x3, 0x9}) 06:02:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x1100000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00qp', @ifru_flags}) 06:02:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00p\xe0', @ifru_flags}) 06:02:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x2000000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00P\xf0', @ifru_flags}) 06:02:19 executing program 4: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28040}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {0xd}, [@typed={0x1c, 0x7c, @str='em1!{em0ppp1bdevmd5sum\x00'}, @typed={0x14, 0x68, @ipv6=@rand_addr="5e8489a7f58665b32d7c4d6972fadb88"}]}, 0x44}, 0x1, 0x0, 0x0, 0x48044}, 0x400) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc0585604, &(0x7f0000000080)={0x1}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 06:02:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x7f\xff\xff\xff\xef', @ifru_flags}) 06:02:19 executing program 4: futex(&(0x7f0000000000)=0x40000002000000, 0x609a4542096fa784, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f00000000c0), 0x1) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000080)=0x100) 06:02:19 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:20 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x89c3a33c483a76c6) r3 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0xfffffffffffffffb, 0x400) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={r2, r3, 0x4, 0x1}, 0x10) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000001c0)=@req={0x13b6ae39, 0x7, 0x82, 0x7}, 0x10) 06:02:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x3d49d1993f000000, 0x5, 0x0, r0, 0x0}]) 06:02:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00@\x00', @ifru_flags}) 06:02:20 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x206081, 0x0) lseek(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc0585604, &(0x7f0000000080)={0x1}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f00000000c0)="ceed305cd431192a0e11b764efc4315a1398095b88a2c251c7c4c020718bcdfba4260c5ce6b563514580d0fc5b8047732003db67c15b2fbfb3fee2ccd548c5901be6433227e69648199c9326fe13ad0ad692d22c1f1ff9e39bb29e2cf8e4186b15bbbe9e5333fc8a3f2997912283bdf590d246be", &(0x7f0000000140)=""/206}, 0x20) 06:02:20 executing program 4: getresgid(0x0, &(0x7f00000001c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) read(r0, &(0x7f0000367fe4)=""/91, 0x275) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000080)={'nat\x00'}, &(0x7f0000000100)=0x78) socket$inet(0x2, 0x0, 0x0) 06:02:20 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x0, 0x117, 0x4, 0x5}, @op={0xffffffffffffff9a, 0x117, 0x3, 0x1}], 0xfffffd92}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="f0000000bb000000000003000000000000fe80606700"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d6ec7f3214ba8c448c308273be00"/168], 0xf0}}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00v\x00', @ifru_flags}) 06:02:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x3f00000000000000, 0x5, 0x0, r0, 0x0}]) [ 394.700715] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=187 sclass=netlink_xfrm_socket pig=19490 comm=syz-executor.1 06:02:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x96\x00', @ifru_flags}) 06:02:20 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='\t\x00\x00\x00\x00\x00\x00\x00\x00R\xfbo#\x02', 0x0, 0x2) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x31435641, 0x4}}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) [ 394.746025] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=187 sclass=netlink_xfrm_socket pig=19499 comm=syz-executor.1 06:02:20 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200000, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000140)) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x40, 0x0) 06:02:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00@\x00', @ifru_flags}) 06:02:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x4000000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x7, 0x800000007fc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x141100, 0x0) fchmodat(r1, &(0x7f0000000440)='./file0\x00', 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r1) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe2a) socket$inet6(0xa, 0x2, 0x4b2e) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[]}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x8) dup2(r1, r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000004c0)) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) r9 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r9, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) r10 = dup3(0xffffffffffffffff, r8, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0xffffffff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x400000000000, &(0x7f0000000400), 0x2, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x33d}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x9}, [@typed={0x8, 0x3, @fd}]}, 0x1c}}, 0x0) 06:02:21 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={r6, 0x2, 0x401, 0x9, 0x9, 0xffff}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000340)={0x80000000, 0xfffffffffffffe00, 0x8, 0x401, 0x9, 0x3, 0x7, 0x6000000000000, r7}, &(0x7f0000000380)=0x20) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x89}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5035}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x9) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\xf0P\x00', @ifru_flags}) 06:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) [ 395.479397] bridge0: port 3(gretap0) entered blocking state [ 395.527273] bridge0: port 3(gretap0) entered disabled state 06:02:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x401f000000000000, 0x5, 0x0, r0, 0x0}]) [ 395.589266] device gretap0 entered promiscuous mode 06:02:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) [ 395.650601] bridge0: port 3(gretap0) entered blocking state [ 395.656870] bridge0: port 3(gretap0) entered forwarding state 06:02:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00qp\x00', @ifru_flags}) 06:02:21 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x4d01000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:21 executing program 2: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:21 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000003340), 0x4) 06:02:21 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000100)="480000001400190d09004beafd0d8c562c84ed7a80ffe0060f000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00000000000000", 0x48}], 0x1) 06:02:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\xe0p\x00', @ifru_flags}) 06:02:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0xfffffffffffffdd3, &(0x7f00000000c0)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f00000023c0)=""/49, 0x31}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:22 executing program 2: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x7c15000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00pq\x00', @ifru_flags}) 06:02:22 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x300, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 06:02:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00v\x00', @ifru_flags}) 06:02:22 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:22 executing program 2: pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4b40, 0x0) 06:02:22 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000580)=0x7, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x6, &(0x7f00000004c0)=[{&(0x7f00000001c0)="80e42c8196c5146ffeaebcdd3e3deb211d0aca617f1a4701af519c87232650160984209408fb7ccf3bea91e18cb5cca2f410c845b4349d03cc555e8ad40cc64e8abb70d8", 0x44, 0x4c}, {&(0x7f0000000300)="952f7e9e6f2ea0ac870579bb7dbd5f008c584fb66f2dda56e3aaf79fd1d2aab50108f1d7b58c928c307508924ab9fcc22a52c2b7c8e4a3abb94cedefa22ab1cc91a2bc92c6361399a81f8294467aa5a275a4a4f9e92fdc62be6944b3da1aca020800e67349aaf4d481f5d4d998931d6a455ed63a8b22c4f7f69fe37122ac9f5d0a5d22d8dc6cd87f5816c3e1ef135dea099e038f524c20cb798a1e112c9363af09711ced427a7153dbfe4f144ee92f8584fa2e", 0xb3, 0xd4}, {&(0x7f0000000140)="c18e7a3d9d70e041d969f662a128159cf633cd", 0x13, 0x4}, {&(0x7f0000001380)="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", 0x1000, 0x20}, {&(0x7f0000000240)="9115e7490ab2a6ec8610f2cb36831a0a3377453afeb59c10734835aadff1bd8e90bff344d157aeb795d43c0f2df65ff808d20dd63f35265b024e18455bf1cf872ca65102c798b91781468d74c7103bd3bb399f", 0x53, 0x8}, {&(0x7f00000003c0)="2ce766557b685f171dc4c2c118b12dcddc4db77507c6ec420f9b91c9e866a5cb63f3b97b6c7fd91bb603d1c02f12bd3b7dc1c4a835b9b88883986540199722fc90a4085d0676fc0f26a2b4e1f2b3e2a73363bdf707f6913f0f2d971271f8944eb64597b4532b917079d985d3588a2fd802b0206c6d48ff3802e933de85dc2c17a83289431be241a4bfff61b0ff89278dacc8afb7c42af615f49d299334df38aee68e89b951b9fdfd0d666907fd35891d322eae0cabca72cb177000e4a2265be2f00df73cf52777830882d335749e3acb7f17adfaf5ac127d600a878dea", 0xdd, 0xfffffffffffffff9}], 0x3220004, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xd4e5}, {&(0x7f00000023c0)=""/49, 0x200023f1}, {&(0x7f0000003580)=""/4096, 0x1000}], 0x3, &(0x7f0000004780)=""/245, 0xf5}}], 0x30, 0x0, &(0x7f0000008000)={0x0, 0x989680}) 06:02:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x8000000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:22 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x44041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffd8) 06:02:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00p\xe0\x00', @ifru_flags}) 06:02:22 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) 06:02:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x9a02000000000000, 0x5, 0x0, r0, 0x0}]) 06:02:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00P\xf0\x00', @ifru_flags}) 06:02:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:23 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:23 executing program 4: r0 = eventfd(0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.L'}, 0x15) 06:02:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00@', @ifru_flags}) 06:02:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xfeffffff00000000, 0x5, 0x0, r0, 0x0}]) 06:02:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:23 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f00000001c0)) 06:02:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00v', @ifru_flags}) 06:02:23 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xffffff7f00000000, 0x5, 0x0, r0, 0x0}]) 06:02:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\xff\xef\xff\xff\xff\x7f', @ifru_flags}) 06:02:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0xffffffff00000000, 0x5, 0x0, r0, 0x0}]) 06:02:24 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\x96', @ifru_flags}) 06:02:24 executing program 4: r0 = socket(0x11, 0x800000003, 0x81) bind(r0, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) write$binfmt_aout(r0, &(0x7f0000001500)=ANY=[@ANYRESDEC], 0x14) 06:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) 06:02:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00q', @ifru_flags}) 06:02:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}]) 06:02:24 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00p', @ifru_flags}) 06:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x2000000000007, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000200)={0x0, 0x7530}, 0x10) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="08dca50d5e0bcfe47bf070") socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='./file0\x00', 0x110000141042, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWALK(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="a2e12f751ea10a619b0a6fbc41ef667beb57e0a2a7d10882e59bb09649c290804843170b6c057756b231a4657f53ce0d00ea758bd080b9314cc76f02e1630f7681efeafaac532fcd4c9aeb62542bcb9ce0ac3b537df19c8c4abca0304b48256e8cbc567469e6d57bb565215f1f"], 0x9) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000683ff4)={@loopback, @loopback}, 0x20f) setsockopt$inet_group_source_req(r5, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f00000000c0)={@empty, @empty, @loopback}, &(0x7f0000000140)=0xc) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) ftruncate(r4, 0x10099b7) sendfile(r1, r4, 0x0, 0x88000fc000000) 06:02:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x0, r0, 0x0}]) [ 399.149150] audit: type=1800 audit(1569045744.822:93): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.4" name="file0" dev="sda1" ino=17563 res=0 06:02:24 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00P', @ifru_flags}) 06:02:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}]) 06:02:24 executing program 4: clone(0x202, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x13a, 0x0) execve(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) clone(0x1000001000017fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:02:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x7f\xff\xff\xff', @ifru_flags}) 06:02:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0}]) 06:02:25 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:25 executing program 4: 06:02:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00@\x00', @ifru_flags}) 06:02:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 06:02:25 executing program 4: 06:02:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00v\x00', @ifru_flags}) 06:02:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:25 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xa, 0x0, r0, 0x0}]) 06:02:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sysfs$1(0x1, &(0x7f0000000040)='ramfs\x00') 06:02:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:26 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xb, 0x0, r0, 0x0}]) 06:02:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 06:02:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00@\x00', @ifru_flags}) 06:02:26 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x40000000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x8031, 0xffffffffffffffff, 0x0) 06:02:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\xf0P\x00', @ifru_flags}) 06:02:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:26 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xd, 0x0, r0, 0x0}]) 06:02:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00qp\x00', @ifru_flags}) 06:02:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:27 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:27 executing program 4: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)=ANY=[@ANYBLOB="f0ffff15b90031"]) syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r1, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000200)={{{@in=@broadcast, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x40010) 06:02:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\xe0p\x00', @ifru_flags}) 06:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x10, 0x0, r0, 0x0}]) 06:02:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00pq\x00', @ifru_flags}) 06:02:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x13, 0x0, r0, 0x0}]) 06:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:27 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00v\x00', @ifru_flags}) 06:02:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x14, 0x0, r0, 0x0}]) 06:02:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:27 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x20) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x18) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) fcntl$setpipe(r3, 0x407, 0x0) getpid() write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1f7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) r8 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_DEL(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r8, 0x400, 0x0, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x7e671d3f076cef07}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @remote}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000806) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8bd8b091", @ANYBLOB="000127bd7000ffdbdf250b00000008000500010000000c000200080002004e210000300001000c000700100000000100000008000800090000000800090029000000080008001f000000080001000a00000008000600ff7f00002400030008000800000000000800040005000000080007004e230000080003000000000044000200080008000400000008000e004e240000080002004e21000008000600000000000800050000"], 0x2}, 0x1, 0x0, 0x0, 0x4000}, 0x4) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='gfs2\x00', 0x8000, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x4) 06:02:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x15, 0x0, r0, 0x0}]) 06:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00p\xe0\x00', @ifru_flags}) 06:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x18, 0x0, r0, 0x0}]) [ 402.684103] audit: type=1804 audit(1569045748.322:94): pid=19939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir146012670/syzkaller.oWQZbY/363/bus" dev="sda1" ino=17685 res=1 06:02:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00P\xf0\x00', @ifru_flags}) 06:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x22, 0x0, r0, 0x0}]) 06:02:28 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) [ 402.930876] audit: type=1804 audit(1569045748.560:95): pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir146012670/syzkaller.oWQZbY/363/bus" dev="sda1" ino=17685 res=1 06:02:28 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:28 executing program 4: seccomp(0x1, 0x0, &(0x7f00000005c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xffffffffffffffff}]}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:02:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x35, 0x0, r0, 0x0}]) 06:02:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 403.239866] audit: type=1326 audit(1569045748.868:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=19961 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0xffff0000 06:02:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe, 0x0, r0, 0x0}]) 06:02:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\xff\xef\xff\xff\xff', @ifru_flags}) 06:02:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:29 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0}]) [ 403.993687] audit: type=1326 audit(1569045749.621:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=19961 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0xffff0000 06:02:29 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x800a0}, 0x0) syz_genetlink_get_family_id$tipc(0x0) pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socket$inet6_udplite(0xa, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r1 = socket(0x8000000000015, 0x0, 0x0) getsockopt(r1, 0x0, 0x8, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, 0x0) getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004084) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = socket(0x1e, 0x0, 0x0) sendmsg(r4, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r5 = socket(0x1e, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) splice(r6, &(0x7f0000000580)=0x3b, 0xffffffffffffffff, &(0x7f00000005c0), 0x5, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f00000003c0)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0)=r7, 0x12) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002780), &(0x7f00000027c0)=0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:29 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3, r0, 0x0}]) 06:02:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x7f\xff\xff', @ifru_flags}) 06:02:29 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x800a0}, 0x0) syz_genetlink_get_family_id$tipc(0x0) pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') socket$inet6_udplite(0xa, 0x2, 0x88) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r1 = socket(0x8000000000015, 0x0, 0x0) getsockopt(r1, 0x0, 0x8, 0x0, &(0x7f0000000000)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, 0x0) getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4004084) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r4 = socket(0x1e, 0x0, 0x0) sendmsg(r4, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r5 = socket(0x1e, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000001ac0), &(0x7f0000001b00)=0xc) r6 = socket$bt_hidp(0x1f, 0x3, 0x6) splice(r6, &(0x7f0000000580)=0x3b, 0xffffffffffffffff, &(0x7f00000005c0), 0x5, 0x1) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000300)={0x0}, &(0x7f00000003c0)=0xc) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0)=r7, 0x12) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getgid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002780), &(0x7f00000027c0)=0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4, r0, 0x0}]) 06:02:30 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00@\x00', @ifru_flags}) 06:02:30 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800a0}, 0x0) r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) r1 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x10003, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001700)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000001740)='cgroup.subtree_control\x00', 0x2, 0x0) socket(0x1, 0x0, 0x6866) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$bt_hidp(0x1f, 0x3, 0x6) splice(r5, &(0x7f0000000580)=0x3b, 0xffffffffffffffff, &(0x7f00000005c0), 0x5, 0x1) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000003c0)) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r6 = socket(0x8000000000015, 0x80005, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@local, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) sendmsg$nl_xfrm(r6, 0x0, 0x4004084) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r7 = socket$bt_hidp(0x1f, 0x3, 0x6) splice(r7, &(0x7f0000000580)=0x3b, 0xffffffffffffffff, &(0x7f00000005c0), 0x5, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r8}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001880)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000001840)='eth\x00', r8}, 0x30) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000018c0)={{{@in6=@remote, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f00000019c0)=0xe8) getgid() r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r10 = socket(0x1e, 0x1, 0x0) sendmsg(r10, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x1, 0x0) socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f00000000c0), 0x4) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) socket$inet6(0xa, 0x2000000802, 0x0) r12 = getgid() setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, r12}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000002380), 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002680), &(0x7f00000026c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r14, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:30 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5, r0, 0x0}]) 06:02:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00v\x00', @ifru_flags}) 06:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:30 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) [ 405.071014] audit: type=1400 audit(1569045750.692:98): avc: denied { getopt } for pid=20072 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:02:31 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00@\x00', @ifru_flags}) 06:02:31 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:31 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) 06:02:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\xf0P\x00', @ifru_flags}) 06:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:02:31 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:31 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00qp\x00', @ifru_flags}) 06:02:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:02:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8, r0, 0x0}]) 06:02:32 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:32 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\xe0p\x00', @ifru_flags}) 06:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:02:32 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180), 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xa, r0, 0x0}]) 06:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00pq\x00', @ifru_flags}) 06:02:32 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00v\x00', @ifru_flags}) 06:02:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:32 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:32 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:32 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xb, r0, 0x0}]) 06:02:32 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:33 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00p\xe0\x00', @ifru_flags}) 06:02:33 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd, r0, 0x0}]) 06:02:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00P\xf0\x00', @ifru_flags}) 06:02:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xe, r0, 0x0}]) 06:02:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:02:33 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:33 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:33 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:02:34 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xf, r0, 0x0}]) 06:02:34 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r0, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 06:02:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:34 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:34 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:02:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\xff\xef\xff\xff', @ifru_flags}) 06:02:34 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x10, r0, 0x0}]) 06:02:34 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:34 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) close(0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:34 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:02:35 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x11, r0, 0x0}]) 06:02:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:35 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:02:35 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:35 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:35 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x14d, r0, 0x0}]) 06:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:35 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:35 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) socket$rds(0x15, 0x5, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x7f\xff', @ifru_flags}) 06:02:35 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x29a, r0, 0x0}]) 06:02:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00@\x00', @ifru_flags}) 06:02:36 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:02:36 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:02:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x300, r0, 0x0}]) 06:02:36 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:36 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:36 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:36 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r1, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 06:02:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00v\x00', @ifru_flags}) 06:02:36 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x500, r0, 0x0}]) 06:02:36 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x96\x00', @ifru_flags}) 06:02:37 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f00000000c0), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x600, r0, 0x0}]) 06:02:37 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:37 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00@', @ifru_flags}) 06:02:37 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) getgid() r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x700, r0, 0x0}]) 06:02:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\xf0P', @ifru_flags}) 06:02:37 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xa00, r0, 0x0}]) 06:02:37 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:37 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00qp', @ifru_flags}) 06:02:37 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xb00, r0, 0x0}]) 06:02:38 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:38 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) socket$inet6(0xa, 0x2000000802, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\xe0p', @ifru_flags}) 06:02:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd00, r0, 0x0}]) 06:02:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00pq', @ifru_flags}) 06:02:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xe00, r0, 0x0}]) 06:02:38 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00v', @ifru_flags}) 06:02:38 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:38 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\x96', @ifru_flags}) 06:02:38 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xf00, r0, 0x0}]) 06:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:39 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:39 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00p\xe0', @ifru_flags}) 06:02:39 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00P\xf0', @ifru_flags}) 06:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1100, r0, 0x0}]) 06:02:39 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:39 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:39 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x157c, r0, 0x0}]) 06:02:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:39 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:39 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1f40, r0, 0x0}]) 06:02:40 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\xff\xef\xff', @ifru_flags}) 06:02:40 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:40 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x2000, r0, 0x0}]) 06:02:40 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r8, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:40 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3f00, r0, 0x0}]) 06:02:40 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:41 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4000, r0, 0x0}]) 06:02:41 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\x7f', @ifru_flags}) 06:02:41 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00@', @ifru_flags}) 06:02:41 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket(0x1e, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00v', @ifru_flags}) 06:02:41 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x401f, r0, 0x0}]) 06:02:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:42 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\x96', @ifru_flags}) 06:02:42 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4d01, r0, 0x0}]) 06:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:42 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:42 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:42 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7c15, r0, 0x0}]) 06:02:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\xf0', @ifru_flags}) 06:02:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00q', @ifru_flags}) 06:02:43 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:43 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7d00, r0, 0x0}]) 06:02:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\xe0', @ifru_flags}) 06:02:43 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00p', @ifru_flags}) 06:02:43 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) socket(0x1e, 0x1, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x9a02, r0, 0x0}]) 06:02:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:43 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:44 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x2000b, r0, 0x0}]) 06:02:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:44 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:44 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00p', @ifru_flags}) 06:02:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:44 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7d000, r0, 0x0}]) 06:02:44 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00P', @ifru_flags}) 06:02:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:45 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x100000, r0, 0x0}]) 06:02:45 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:45 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:45 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x200000, r0, 0x0}]) 06:02:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\xff\xef', @ifru_flags}) 06:02:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7d0000, r0, 0x0}]) 06:02:45 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:45 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:45 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd00700, r0, 0x0}]) 06:02:46 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:46 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1000000, r0, 0x0}]) 06:02:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:46 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:46 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x2000000, r0, 0x0}]) 06:02:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:46 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:46 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:46 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3000000, r0, 0x0}]) 06:02:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:47 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r7, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:47 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4000000, r0, 0x0}]) 06:02:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:47 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:47 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x0, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:47 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x5000000, r0, 0x0}]) 06:02:47 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:47 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x6000000, r0, 0x0}]) 06:02:48 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:48 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7000000, r0, 0x0}]) 06:02:48 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:48 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:48 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8000000, r0, 0x0}]) 06:02:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:48 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:49 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xa000000, r0, 0x0}]) 06:02:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:49 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:49 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:49 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:49 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xb000000, r0, 0x0}]) 06:02:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:49 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xb000200, r0, 0x0}]) 06:02:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:50 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:50 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:50 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:50 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd000000, r0, 0x0}]) 06:02:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:50 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xe000000, r0, 0x0}]) 06:02:50 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:51 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:51 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r5, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x00\x00\x00\xff', @ifru_flags}) 06:02:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xf000000, r0, 0x0}]) 06:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:51 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:51 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:51 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x10000000, r0, 0x0}]) 06:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:51 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:51 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x1e, 0x1, 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:51 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x11000000, r0, 0x0}]) 06:02:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:52 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:52 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x20000000, r0, 0x0}]) 06:02:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0b") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:52 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:52 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:52 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3f000000, r0, 0x0}]) 06:02:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x4000}) 06:02:52 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:53 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x7600}) 06:02:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x40000000, r0, 0x0}]) 06:02:53 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x9600}) 06:02:53 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r3, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:53 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x401f0000, r0, 0x0}]) 06:02:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x400000}) 06:02:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47b") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:53 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) socket(0x0, 0x1, 0x0) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x50f000}) 06:02:53 executing program 4: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:53 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4d010000, r0, 0x0}]) 06:02:54 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x707100}) 06:02:54 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:54 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100), 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7c150000, r0, 0x0}]) 06:02:54 executing program 4: r0 = socket(0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x70e000}) 06:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x717000}) 06:02:54 executing program 4: r0 = socket(0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf0") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:54 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:54 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x9a020000, r0, 0x0}]) 06:02:54 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x760000}) 06:02:54 executing program 4: r0 = socket(0x0, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:55 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x960000}) 06:02:55 executing program 4: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfeffffff, r0, 0x0}]) 06:02:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0xe07000}) 06:02:55 executing program 4: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:55 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:55 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xffffff7f, r0, 0x0}]) 06:02:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0xf05000}) 06:02:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:56 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:56 executing program 4: r0 = socket(0x1e, 0x0, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x400000000000}) 06:02:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffffffe, r0, 0x0}]) 06:02:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x760000000000}) 06:02:56 executing program 4: socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:56 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:56 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3f99d1493d, r0, 0x0}]) 06:02:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x7fffffffefff}) 06:02:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:02:57 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:57 executing program 4: socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x960000000000}) 06:02:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:02:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x10000000000, r0, 0x0}]) 06:02:57 executing program 4: socket(0x1e, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x70710000000000}) 06:02:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:02:57 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:57 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7d0000000000, r0, 0x0}]) 06:02:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 06:02:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0xe0700000000000}) 06:02:58 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:58 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0xf0500000000000}) 06:02:58 executing program 1: r0 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 06:02:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x10000000000000, r0, 0x0}]) 06:02:58 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffff1c000001000000000086dd60e3060000083a0000000000000000000000fffffffffffffe800003000000000000000000000000000000aaa3e36467"], 0x0) 06:02:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0xffefffffff7f0000}) [ 432.954133] audit: type=1800 audit(1569045778.341:99): pid=21470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17903 res=0 06:02:58 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x20000000000000, r0, 0x0}]) 06:02:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xec5, 0x440040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000040)={0x4, 0x941, 0x9, {0x77359400}, 0x461, 0x7}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:58 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4b40, 0x0) 06:02:58 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r0 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev(r0, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r0, 0x20, 0x0, 0xfffffeff000) fallocate(r0, 0x0, 0x0, 0x10000101) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 06:02:58 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r0, 0x65, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r0, 0x8930, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:58 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd0070000000000, r0, 0x0}]) 06:02:59 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:59 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x50000, 0x1) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x7ff, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000100)=0x6) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x0, 0x80000001, 0x100, 0x4bd2297c, 0x2, 0xffffffff}) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x7, 0x4) ioctl$sock_ifreq(r2, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) 06:02:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x100000000000000, r0, 0x0}]) 06:02:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, 0x0, &(0x7f0000000080)) sendmmsg$sock(r0, &(0x7f00000031c0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x0, 0x1, 0x4, 0x2}}, 0x80, &(0x7f0000001800)=[{&(0x7f00000000c0)="a61a00c13c9fa70adc352ca44f234cb905d89efde376b06942dd0d14d94207270f09986f7ac2ffab897cab5fe5e6464633601132f1fb2687e92276c1a5b56af93e551094919fd547c93f0dbc4dacb59304e7f7bdcdf69a730ac2256af0027b1005d5828de26da6acab4d9bf9b53794750f12f5a57d0762539f149c54d8f467d3d3e68fbf6257e0f44175160c6f5340e94212343b94c8ee5c3f4920491870b74c4f72b08a249d25ca0cd10c84f469496579ca022ef9e703727c51489ad2574bd5acc27d3d3f51bb2192dc32a9a3d6", 0xce}, {&(0x7f00000001c0)="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", 0xfc}, {&(0x7f00000002c0)="a9b9ff48e7853189b643c136cf4385f20c29d2b8f22d39584cc9fb1c812f906c66773c9a6fe5b4d10065c29feb80515c59fa7bfb7598a12579243c6e4b5d2d0e30eb993e9371328dd5f5d320f8481363f334ae0d0180acd3ac0c5eb52dba0d5218dd78107a95c73278e202052f36c3740ec70861098c1348e90832bf477d61c270e14dd16b156eb487dea9645ae777be7a37a9407a888159ea7b1d133610c7bd09511991ba0742e727", 0xa9}, {&(0x7f0000000380)="c198c341a242db8be8c9e4bc8c3d7b78740511cbcb4d2b02be216addb6ebc3bfba9056139e2a84bc7bbd4c743312a40ab237d2afe54fe78dac562aa30e77af687d773167a9c3684ad902d2d26d8b6142a8d9038616b4d394788436a23201f9582bc8a40c8f387862a0c87a73ffcd4f308a0f2dc70540646681e18a78a16d12138c397bdfdf1602603894b0c0a20ce9b70834e6ca265b2974e3780b1d76c1bf0ec59632dad1ad29d9904f92c46a089e76f6f9b71020fa0bb04d4c903fb4c467b112b3204631b0ab747455ef6ff6593ac2a476a22e7a257493d09f63", 0xdb}, {&(0x7f0000000480)="6c41734efaa5fb8c001814b90f4d1f0af5ad0bedeb9e1e72ad9f7af3b08659a5e9b87513c8e9bce24ce9b3e4cdd5723e153287199180091bf561a60d12b622b902e89121902fbd006aaddb9c43393145cff668d1f08efaa1056433f8739bedf62468196a6885cb94943e6651a06aac0ff74003af10dbd2bae932830d1364eeff1a200d40443f7e2777ce776c19aba34c051fb60010bffbbb1560674abc7e5bbcd3d26e360e86f0c5f6211d1a2ddcbd19e80e34ee0cbcba47825e865fb4a129307d2e", 0xc2}, {&(0x7f0000000580)="a5f83dcc4b57e6976fc2f6f81fdffe40dc93d0f6115fc2d849082b3e6eba7cebc439f2b3fedd86a5dd08afe0e9e1a32086be6d4b1b5a2927f0", 0x39}, {&(0x7f00000005c0)="2642f6d2fb29f520e92c71c4dca5d830b79ea05d2a9194ca948a4647e543f32bedf61f50dfd3cc80ae1f26c65c93b85a16728266e0c634f2c67e7a1746b7744345694b8e9f48127dfeedba55fcbf54794a66f2e300100bd2d5c24950cb17dbaa2adde08f6ac5a4e180edb5515e170b095b79e12871d6e5264f46a838c7b6c8eab8d8c6f1b21dad45d2fc67c99fa169788f251f0c0f8caa2a36efe24ad096670cc0b00c13aee97f77911eb4beef91ffc7860a40e6f4d6d752a37748be3b546c8166856555b57f22915b615832212d8a73250848044f5acbd244d08e88c971bc4f24e8840ad0150c3396d9d936d816575bc97ee843f0059e5834", 0xf9}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="11b8222bd7b4bd4706", 0x9}, {&(0x7f0000001700)="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", 0xfc}], 0xa}}, {{&(0x7f00000018c0)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0x0, 0x7fffffff, "1f8dea643302a5173cf9e2e9a33e1b480e9ae483e7ba53f7f2b9eb60c84997cdaffb8ede28edc91906b51f1d6107a4b851a0e6f166897ddd94cfd7545d999b", 0x1f}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000001940)="2807e30439a7e51d3cee0fa36527811bf3338e7c35b8a7ce40ae75d5064bffa948b5749bb4a17e90093d9819d9c20517f103b85643d0510cf36430e45b760b85f7fdc47af23154d809ae1a01aadae88cacecfb4b66d20bcde04435b9a2381defb55391282b4bda0e4836139dfdc7f15f0b125ff8a1c82d54e16dbdce0e8a3528e1bf5612e706d059ae44263d8bef0f0e2416c88d7752e06fab9e3dcc04399565c866236faef21aabdca3f421e6477768c2271a1f87749b359cfd2f104ba4b752bab6ea2fe1c04923c74f1ce388beaa5e42805c9233bc38d442ad5f5b5d30bfffd9bb037f2fcce797f0e00ff4f0ba7266235b04a1f2dc019b289bf32bc03ea2a60cd0116ba2b897520ec5c7b70bc646bd602c00127ac2f23254b016975b102c7812044d68ebdda47dfdd1a0e28f6af147d1196bbd33f415940557c19e3cb5c8bcea91099e30eea2fd294e4a218015220d0659379b021358f97882653f7dc3c2677de222599593b3d1fdadce5e1216e6362508e1aba8a4e57f988cdb71826df36af4bc1cf48f00ccd2b57b3bd45eb5e6fa283c2309ef02492773e18d9ff80c9a3b2284808d2d3afea24e0ae148440afcbdd5a2669eb2ecec7629bc6eab4fed11848eb84557abac9ad1455bb94660489b1a8e45ec46a5f4f357b00a5d4b5e71d60c96f24b4d95df6cf7f75bb7ec395c2d2fd82c9b316626240bc960abc49eb7557498c0f6ca9d7fd17b68b4c79e1130b2494e795830f88c1dcb54b4dd03b1eeb0eafb7b750fad5f45daeca7a709504771f5c1aad1fd6479bccd6ac6eaa798ae87534f75d1bc5d1ae67b1e8334556d140925568670fd9453b4b1a3beb6c9ace7874a14e95d7042e73195e88826ca66fedfb69a0b5e57123d62f3807383d5aa11c02fec99a3954d2735efbd30a5b4338785e46eac1360c4e10cbf36e660974b6a3adef7edb6153a43db52d58ee23779e19847281dcfe65f3908dfe784c3848062f9b11066cb92ea8dfb34ad3d5a6b73404c1c97eeb0e720d9007b3f0329c7d196707dd9e558d44d754da19cd648e93b6d7ffb225e80c39f754e17953527bc25cec2f696fb9b492380d100aebd81920b1620189cb2df7d3f39b56d7998c41342c8826cff38a839f141b0e41b719765c25b4df26a570ea8cce53388874c03043910474bb0c42a01ca4b10acad7abadb620a15abae5417c4985eb50f1711aff5940fba15f667f112b62ca5c3776a76c290f3a4e77615fcd832341a8646fe1f82db9376f1bbe8744935b6bb5fc4205612409b5991485757d78a63bb3a477fcee26afb447076784b444f67de360d8008e1ad6d7741372e88b929933c54d53bce5ffb3b4815294a776579120b068db5e3d69a67981fb9f2117437d00c93c188aedcd966ab41d8b3e340e7edabb6f77bd8887cb89099bafcee47d7979cc182297540f5d6a9a17fa3ecaefd9d189d21777d6bc7218b9799fd9a4e360ff7fbbd1c69d17f1d9aafd0e20a8b29da0bfbc932df245bdee310b1ec7f4d2de49960ef78bcf6d69867e3e5b6a4a38738dc2be33f383c61673f1f774cf69027ee56d90d593e5992b77fae6ba51fb4446ada1ec4dfafc0254659088e4e98e99fd3f7fa77546e27b040dd9f63eb25a937780f072ded0770c94d89389c8ce6d8c2f1832525afc8eec1c7efa8071a13b4f270dedabe7bd43cf674219bf6e675df97041981f4c349b4c834b78c2b959fcba15b2825dcfb06345ddaf2e22187a289a3db068b79108b8de75b9684b95d875f9b6cc0cac4673de2645e4a19edec14a821f4ace19c581223f2b79687867012288ab3ea72506461ee218d1ed2bf4f894be7067cff22e5fbfecdc1d39cfe648f84db3244a4381788dc12cc39319d81c92b642a564afff2fab0bbcb5bbcf509c0ccc27b8635363761f86455948a4266794319d64f72600afb5e0a235dd51a13961910f9ef05968feb4a70b2cf1c614b235eedf9d853b688f2f288a8b258413787892b4fb7126b0fb93082fd3348f67293f18e6b01965330f2418011983afdc68db024d29e319fe08a2af9d7739dfd1edfac13a880f6eb6d70694cb08a1703e8f82b0b3dc790ec6b86d9a86c1c2ea2276dd200bce16f23fc7ee2c8d4cbadca95d0d8405e3bcbaccf23cb2940ecdfdc103511c257a707499249a7dea9cfc1913830630f002aba62a43abf906af8ceb60f2a3bbbc607bfae1ec45c2a6aa3471c36b5035ef30c09b505bb966566e08c8e10d9c655e8c5052de7f46142bd0d12e581c1b11810e04dc5d77a77694b6415b9e45098645f3d085fac7756cf0ef7132d2e1477e1317471e9de76c28095bbf7d2b561cc2908f4ad21ff606a670b61a0ff6bd64d38f8f5a18695ad4dd06cb86444c085b56ec5afa68b280690c9eae119ff9b151b296b96e4d68c6d54a9bf300f86f357b59e7bacab8ade3a1de27985de431cd32317edc644d59a2d96b0a5b919669bd198ff03383ee55a92361a860c7f1ac7d0a54b0fc30f5c2b6c472f510d683ab06e92c9c484607a74bee59218e9f3faf0c52882a13165821ece3f1b0044c6a70718c86728811f7eac5802f448f6246456dbcc96e4ece3bbb45321361d4dc4cebfbf58df647e851a4093a3f1fbeb9aea166f743315b28a6c6ac959c08dd7fafefa29e2a5c4f17ca6d7fa6d2f00d3eb86cb0cdb4b4ed28d6dc09a99e4ede0b663b67afc7d5e319657e5dd44835332b95c62393cfe6dac2cc4a9dc7237a03dff21c8963b778e42f494814668182c29ae6e058d4830f4fae6deec216ae55e74238079de2ff279def7efd1ea777807954b221c0c67af8e80433a7628aacfb295e629667bc11cef417dcdc88db63e62fdfb50ed25fde7b715a34e9e8b15344ecf03f1adb85f104ca617404f6dec59c78b0a2ec861936568f52341059fb7bd06b6e612d99cd8d003971cd2f3871bf0a51847aea03323052fb96e8a0485016f1076984bd228db8878530fe039961cf602cb175a9f97ffb61a2f2b553e0bbce3dedbc7aa202731cbda1cfc1cb512a7028f4e68332e5e38e2cf7f5420e0968bd728ce8afbb107c8a2520e80ac311dc5048735fded18bad8ef8968e69c137b42ab64e0c0c935298f24c473d914b90a1e3044b32280e27aaf4b57dc08cc0ef8afb47d42e392be9df1a76efc5a925643f078dd71a25295f0c06166ebc7d566946a0d33fe680084e93570a33ba1429be18fb53152945200b4b4b91291c8127a155d22f7c742bbd6a293c2975ea0cc542e54001567ce9e07c9e2caa7317ca3ada417ac89d712fe867d000e111480027b22813042e4f903e5fcb3c697476db7ff8a38c0aabe7ee3803832273d6e9ec81d3ba0877b8f90601b7773ea4b87b03b4c81c56d046a05c8c93261c43a7aaaa013249ed4cdd1d5b77048aad2fd3f9f1aebf52da84755f6704bf7c66164effd0079e38bd3ce4c32e0d67d9eac8e36c934ff5354e2514c03bcac71993d6e0f82272fb66d3e97fecad738a95ca4d74edf44dd12caac073fb11da9c41f743dd483dfc77c27af8868c8ae9f9ae83f79fb6a1b2def27de5994d559cc916e1e92fd42adb3ab17be3fed5aca3ac1e7a31dd0004b1f0e1830f230735de93c2b43fc07254959e32e8a4ba63547491ed387bd7d3c8dedbe14b27538e7477d37bc5ba99f204e8e241c1e41d5fa2f0aee2c8e8e544ef62a25f234c6290e607fa619a30715143544b6c89abea50f6b087d20e93de1bc3c53336fee567e813e187a88c09162c700a939da8df90e99cd2a5c97c9b95ebcaf3fcae1a48ab3e4ae544819ad691a1192a206e5d3c08e0397a36ffcf51ad27902867a529b4967970509b20516009e1603cb1b4a56ad69a7a354ac27b36c9a64c132ec9a4b1a5fa9ebff697536c0d46b955685145afb7072e07be2a7eff391f4647652534f7e126479b6673c3b4efaa79c38f2f4af135681ee13a581f886799a5629f6577b9e00b68ff4c9e6ab16f6e4b9563e3e5ce315b155d79887832005d334410897accc2f38f4e43ac64184170f92d0de37f224178a7c383d982346707587e2f831501da9d57e18405ed0c93097ead8badb24865b7c0f1433602b34d0288e4ba2d9bf620061e50e9b40b747ddad106ba8348456251d8908fa452ff10d0675a4c0e564640c0c204b2a6aa9de3a6037d2c1fb248984b7c9aa080fb1f5d7d1111ddac790923e7183d0d6963a64b89b973d2602ce2adac7b27c7d9d509db0da638591894ec1b33270d5b670622e173a77e5d1c1671def171933a93b73755fee568b832d5caff2e1bed742430bdef1926e470125219bb1f33af75413ca71182ea7ef8cd545fb17132d5face2f00709a0ca0c9635ee7a69d7ef39506dbdfaf63bc2cb21ea469b94335a1af70cc557a3e49bb069b81f1595ddd88ecd7a403dee323d82f8bc9186fa71570ea65b2a20891e2832f9b6713d7774103fffe47ba1ca7cb6f8f0eace55fab9654b40775d335a1981717a2d25669747aa03e123fe34846b9bcf805ba9bd3d6d9ac0c456eece125c949ac0df27395e3b170e78b9f9fe2d318b5dc5f5c24d98e43670c3ab17c6090d16c7e5758535a1a97a01f0c0d31b20f5efcaad15594dac18df2d043d2eb365b0839c5f1e835d5b805ccd6d802ac0eac67942c6754b1b019d6b624d57a58d87f2915d7157edeab389842dd4375dde58f319e99a9c6f8832b6fdedfc6a1469871bfac23ae383aea3bb67da87604f8a6ccad3b6a7e24f4d2354d659af872e91658c9147e07be6b70e75ae3cc1e7ff574c075bed04b93632790e943fca08c93ae48a6b3076a7d0e707e884fc909ee1a3bbdf471e89755571f40768d925abfa728683d2f5374dcee3064f91fdd2c39762078e5b8a0926f9549e8b2ce5ca23a71544163b79077280c148baa5d759e79c5f43993e8dcb11fcd10fdc54586c48832a9617094638e97c1ec9a7f96ad1efe0e7ef9858b9a0a5d7859787b81542a808b1c9316197fe316b7f6a3620da73342e3cbada544382c4828f697bcc8738175e652121993b3deaffd0d3cb487371fe4c7c5e990f6c2401e92c5c37595bc40e9b1679ef313fec68c74950e5327a8a4d08c443eba08b4c88a536e114901e4be98e66c4e3afa4770f003e643c87809522fd8e80bc1715753c2bd898cc4df180cdc6f1e9ba4f5c132555e726b406e8539579e1688c7af705bba3e8fa354831df80a6ea4485ecde5378efbe49e441b947e3a6f1ad484ff4df7de96316606a890a971b3b47a23fc542293b8e327619fa5f0a6096488198333698f97a329fc94b338308267e6ccc38443d4f74461f1c533ce7ea4da64c0ffa31073f76d72ff239e12e223a00700ad3e6c60b6ecd418a9a3840dc8c1d6401e1f3a8efa9ec04f6e530620340984e741523aafde1cb8189444031158b96ad7f5f31003897b50a3c0b1f88c555897560f5e2aa378bd6d6394a1b982abc0b68bade5545b57462301337b7b8016e75c68800a9cfe500b73de1fe9e75a9792d3e26761ac32b01dbd09ed5d73aaf8481121a886c6227df621dfa2128ddac1fe402a4e9f982ae889d23a1025367fe01fc634eb4db886a46a3620fcf912e0b12b5173c94c1a2c512121f3df04076750b7d3e8f2f70c634f7d8c59d2c710aee6743a28f437e785bb59dc6b6e40228444521b3b10edb07800063b79c59ea1527c305c58a56ae99ae437caef941ff365a70d078414747ffea45c6682cc5fc799129c95bfb13fadf1aaafafa2655bde05521a258de08547469376391dc4fcccdc147dad7dc40261f7c0cbd1fd9f68dc35baba2a0f3b848ad1e013eae", 0x1000}, {&(0x7f0000002940)="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", 0xfb}, {&(0x7f0000002a40)="16dd771101f8b29a25bf8824f53031e7563c1e3a7025f9b514c7a628fd109d2825bbcfb06757ef4ef461ff69b025a1683be86f278d0abde02db5c20d2ad105c8054b2c8871781a25aa6498b148080a2f6498997941837e8661e9c1e1655a500694565a81ff8fc9f497d507352e2f810755e351", 0x73}, {&(0x7f0000002ac0)="759e986a23807789", 0x8}, {&(0x7f0000002b00)="d16299c20d1cdad677cfc3bcfbee6f770dc3c28507e21dc167937b00eabe47", 0x1f}], 0x5, &(0x7f0000002bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000002c40)="35c592dd457b7baae5a3b5838586657f94b06a1765aea8b79ab1a546484fdde7f9293bc7435d63414c7ff77b5b4c9fb598eb0b12d7f8f7afa36498525549681b", 0x40}, {&(0x7f0000002c80)="547386c725fb99f9053dfdbdba2db91071251b734c38e7e17a3af9e225aacdea5e5df6e4cfce4803cb200caff4e25123f737f2e60511f053c036f7a268cb37cd4101f13508aab60164e6fe064d31cfcb4aaa", 0x52}, {&(0x7f0000002d00)="a6d82a116cd36e58829aeff77d182b64084e6823b280211a1890f4f346cbf9b8a14d6f6c8f8304589a27e0b23907733bd80c136c128063c4ca72fdfa4e55491bac2d358987803bf00acd90e03ffe439bc5d1e0168621a817f61792bd627d77a4efcc66f51d56cebaf117cacc4237f65f9dbb6ba4febb8e0700801fc65fa0349b3fb59a193f39292660bf0005b838c1e6bb8f793a9a4dbb7986c6ee627e61589b3c25a1897bfdb673141a55afc2e17374ba513634fe0c14e60b9c83ff3def61582567e2ebaa1bcc5b12", 0xc9}, {&(0x7f0000002e00)}, {&(0x7f0000002e40)="18743fa001e75cbe1488ac731c519454fc83a7130cec5d4ae5622e7237ebbe51047daf948e4d4a99ef57670efa1e11c50bfcea69a874077c7ce1f3fba5bdc0da", 0x40}], 0x5}}, {{&(0x7f0000002f00)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @loopback}, 0x2, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002f80)="f0e2626617d14c403525d2f44302c353a176a41da650af31e5d4a153d69b0fa397dd1506555f9ce70a6af95c72e2c3f6d4d125ef5b30e9b52cd5f020474bd4981a472a3fc3e1439626b18777095bfa7e72963502c3b7f415b0f8e91cbaee752f4684a941975b585bb54ff487b0aca95d5cfef21c00", 0x75}, {&(0x7f0000003000)="22cecf11c06155c552ecf2c1615685854c49ab9d7ac97ab89946fcdaea68720f9b610b7d3d477c821edaca1a86e850c544b73dc473b679b4d5a07b7b236f598c13e3d16e414a30e36ef5691502e9d8b566ba3daabc8281e636c0a4f6f0a7a631c1a936f16521c0300d12b4bb230bd78eb73cc467", 0x74}], 0x2, &(0x7f00000030c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x96}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0xd8}}], 0x4, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:02:59 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x200000000000000, r0, 0x0}]) [ 433.867535] audit: type=1800 audit(1569045779.244:100): pid=21506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17906 res=0 06:02:59 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:02:59 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:02:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x02\x00', 0x2, [{}, {}]}, 0x48) 06:02:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r1, 0x65, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) r3 = perf_event_open(&(0x7f000025c000)={0x1, 0x16e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x6, 0x6, 0xfffffffffffffffb, 0x0, 0x0, 0x2, 0xc0, 0x4, 0x9, 0xc5e9, 0xffffffffffffff80, 0x1000, 0x3, 0x9, 0x2, 0x73, 0x9, 0xff, 0x1, 0x100000001, 0xfffffffffffffff8, 0x7fffffff, 0x9, 0x7f, 0xff48, 0x1, 0x81, 0x2, 0xe4, 0x8001, 0x7, 0x4, 0xb3, 0x0, 0x101, 0x9, 0x0, 0x1ff, 0x0, @perf_config_ext={0xa0b, 0xffff}, 0x400, 0x80000001, 0x5, 0x9, 0x81, 0xfffffffffffffff7, 0xff}, r2, 0xb, r3, 0x8) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'\x00\x00\x00\x00\x10\x00\x00\x00\x00\x10\x00', @ifru_addrs=@in={0x2, 0x4e23, @multicast2}}) 06:02:59 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:59 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x300000000000000, r0, 0x0}]) 06:02:59 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/227) 06:02:59 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:02:59 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 06:03:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x400000000000000, r0, 0x0}]) 06:03:00 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x0, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:00 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:03:00 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4b40, 0x0) 06:03:00 executing program 1: bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x40) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) r2 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000600)={@local, @local}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000640)=""/205, &(0x7f00000000c0)=0xcd) ioctl$LOOP_CLR_FD(r0, 0x4c01) lstat(0x0, &(0x7f00000009c0)) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) 06:03:00 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x500000000000000, r0, 0x0}]) 06:03:00 executing program 3: sigaltstack(&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000040)) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:00 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000040)={{0x5fb5, 0xfffffffffffffff7}, 'port1\x00', 0x1, 0x20000, 0x5, 0x1, 0x0, 0x400000000000f036, 0x7, 0x0, 0x1ff6ba9b5ab77c39, 0x80000001}) 06:03:00 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:00 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r0, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xffffffd8) 06:03:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x600000000000000, r0, 0x0}]) 06:03:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'dummy0\x00', @ifru_flags}) 06:03:00 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:01 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:03:01 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4b40, 0x0) 06:03:01 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x40) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, 0x0, 0x20000102000007) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x0, 0x0, 0x0) 06:03:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x700000000000000, r0, 0x0}]) 06:03:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_map={0x80, 0x4, 0x8000, 0x7, 0x7fff, 0x39215335}}) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x8001, {0x80000000, 0x8, 0xffffffffffff0001, 0x3, 0xba26}, 0x10000, 0x8}, 0xe) 06:03:01 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:01 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x181101) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x20) 06:03:01 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:01 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x800000000000000, r0, 0x0}]) 06:03:01 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r1, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = semget(0x2, 0x0, 0x40) semop(r1, &(0x7f0000000040)=[{0x7b2cc6411830efa9, 0x2, 0x800}, {0x1, 0x3000000000}, {0x707f5e2784b3f726, 0xffff, 0x1c00}, {0x0, 0x7fff, 0x800}], 0x4) 06:03:01 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:03:02 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) 06:03:02 executing program 1: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000002b40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0], 0x2}, 0x1, 0x0, 0x0, 0x800a0}, 0x8000) r0 = socket(0x0, 0x1, 0x0) accept$unix(r0, &(0x7f0000000280)=@abs, &(0x7f0000000300)=0x6e) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10003, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001780)) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x604dbee55a35388, 0x84) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000005c0), 0x0, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), &(0x7f00000003c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getuid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r4, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000017c0), &(0x7f0000001800)=0xc) socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x19, &(0x7f0000002600)=ANY=[@ANYBLOB="b702000003400000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d6bb7030000000000006a0a00fe000000008500000026000000b70000000000000095000000000000006eace264330a0cbf6e08d472ca3cb9c3fe2e8a1dfd9dbcbb79d68e19c175b61a266a284a7fcd49ab4a305bbea8c1e07ccf518f886c53a1b9cc77998fd8125976bbf8bdfd00c68e87e2db2a037814122b5da1512081fd8357dc9876799b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) getgid() sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x1e, 0x1, 0x0) sendmsg(r6, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) r7 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, 0x0, &(0x7f0000000380)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r9, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:02 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x4b40, 0x0) 06:03:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xa00000000000000, r0, 0x0}]) 06:03:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) r2 = accept$inet6(r1, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x11, "94a59b8e6b9b2a4f43eab6fd66494831d2"}, &(0x7f00000000c0)=0x19) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r3, 0x4) 06:03:02 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) 06:03:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x202080, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000080)={{0x6000, 0x0, 0x10, 0x1f, 0x3, 0x7, 0xffffffffffffff22, 0x80, 0x19, 0x3, 0xfffffffffffffffe, 0x10000}, {0xa001, 0x24001, 0x9, 0x8, 0x10001, 0xe37, 0xe70, 0x8, 0x0, 0x8000, 0x9f3b, 0x10000}, {0x3000, 0xd000, 0x3, 0x3, 0x5, 0x2, 0x6, 0x0, 0x1ff, 0x80, 0x1ff, 0x100000001}, {0xd000, 0x10000, 0x2d7150afd0fa093b, 0x9, 0x1ff, 0x7d99, 0x8000, 0x6, 0x51e, 0x401, 0x8, 0x3ff}, {0x10000, 0x2000, 0x0, 0x7ff, 0x2, 0x100, 0x5, 0x14, 0x1, 0x7ff, 0x5, 0x7}, {0x5000, 0x6000, 0xf, 0x10000, 0x7f, 0x2, 0x20, 0x7c12bc35, 0x80000001, 0x0, 0xa83f, 0xffffffff}, {0x1000, 0x1, 0xe, 0x1, 0xfffffffffffffffc, 0x9, 0xcd, 0x55, 0x7f, 0x3, 0xfffffffffffffff9, 0xffffffffffff6a51}, {0x5000, 0x1e44ac5777ca1b22, 0x0, 0x3ff, 0x3, 0x0, 0xffffffffffff0000, 0x2, 0x2, 0x100, 0x96b, 0x6}, {0x0, 0x1000}, {0x0, 0x10000}, 0x60000001, 0x0, 0xf000, 0x2000, 0x7, 0x4200, 0x4000, [0x10000, 0x7, 0x400, 0xfffffffffffffffb]}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:02 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x7, 0x800000007fc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x141100, 0x0) fchmodat(r1, &(0x7f0000000440)='./file0\x00', 0x1a6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchdir(r1) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe2a) socket$inet6(0xa, 0x2, 0x4b2e) ioctl(r2, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x20, 0x40003e) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) sendmsg$key(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[]}}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x8) dup2(r1, r6) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) dup2(r7, 0xffffffffffffffff) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000004c0)) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) r9 = syz_open_dev$usb(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x7f, 0x200000000000042) ioctl$FS_IOC_FSGETXATTR(r9, 0xc0185500, &(0x7f0000000000)={0xa3, 0x0, 0x0, 0x0, 0x0, 0x7ff0bdbe}) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) r10 = dup3(0xffffffffffffffff, r8, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r10, 0x84, 0xb, &(0x7f0000000280)={0xffffffff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x400000000000, &(0x7f0000000400), 0x2, 0x1}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x33d}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x9}, [@typed={0x8, 0x3, @fd}]}, 0x1c}}, 0x0) 06:03:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xb00000000000000, r0, 0x0}]) 06:03:02 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, 0x0, 0x0) 06:03:02 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) select(0x40, &(0x7f0000000040)={0x6, 0x0, 0xfffffffffffffffb, 0x800, 0x9ec4, 0x1, 0x1f, 0x6}, &(0x7f0000000080)={0x100000000, 0x1, 0xffffffffffffffff, 0x9, 0x4, 0x4, 0x80, 0x99e3}, &(0x7f00000000c0)={0x1, 0xfffffffffffffffb, 0xffffffff00000001, 0x1afb, 0xff, 0x3f, 0x3e1, 0x3}, &(0x7f0000000100)) [ 437.387915] bridge0: port 3(gretap0) entered blocking state [ 437.406333] bridge0: port 3(gretap0) entered disabled state [ 437.451440] device gretap0 entered promiscuous mode 06:03:02 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:03:02 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 06:03:02 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xb00020000000000, r0, 0x0}]) [ 437.478576] bridge0: port 3(gretap0) entered blocking state [ 437.485656] bridge0: port 3(gretap0) entered forwarding state 06:03:03 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:03:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:03 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 06:03:03 executing program 1 (fault-call:11 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:03:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xd00000000000000, r0, 0x0}]) 06:03:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x4b85) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'bond_soave_\xdf\xa2\x00', @ifru_flags=0x2401}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000040)) 06:03:03 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 06:03:03 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xe00000000000000, r0, 0x0}]) 06:03:03 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:03:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:03:03 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:03:03 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:03:04 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:03:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xf00000000000000, r0, 0x0}]) 06:03:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="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", 0x1000, 0xfffffffffffffff9) lstat(&(0x7f00000010c0)='./file1\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) lgetxattr(&(0x7f0000001200)='./file1\x00', &(0x7f0000001280)=@random={'security.', 'rxrpc\x00'}, &(0x7f00000012c0)=""/218, 0xda) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000001240)=ANY=[@ANYBLOB="1100000065ffff010000000800f32b323059302e75950f1042e6083bde8e0000800357586e79efe80979af838d06e0b4b00eca5d91ad"], 0x15) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r3, 0x65, 0x2, 0x0, &(0x7f0000000080)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001180)={0x0, 0x0, 0x0}, &(0x7f00000011c0)=0xc) keyctl$chown(0x4, r1, r2, r4) 06:03:04 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 06:03:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 06:03:04 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:04 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff}, 0x10, 0x80000) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:04 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1000000000000000, r0, 0x0}]) 06:03:04 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4b47, 0x0) 06:03:04 executing program 3: r0 = shmget(0x0, 0x1000, 0xf0000420, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shmget(0x3, 0x4000, 0x78000645, &(0x7f0000ffa000/0x4000)=nil) ioctl(r1, 0x6, &(0x7f0000000080)="ffeb88f0899e1afa62b9761c2f587002903745117a2b154b58e42ae717077d25462bfe0b6365b2fb9a47819d302fb8f86699a584951fa47d3e78ca5100c6043adbbbc4cab4386e6de5f9ce7278b9f5949c01f8d8388ceb29e2ddc33da7eed7699f70a5effbfb7b12d7d831299de42cc67b5de4ffe613b9a8e9b5c660bef221f94d3abea5975c01bb308b414cd35de2138cf417dfbd292d7f59d61297e9f7284aa2ed49a678fb99e1ea378a1d0e") ioctl$sock_ifreq(r1, 0x8918, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_data=&(0x7f0000000040)="27f70a56be2e5ba4469226fdb2f4e26aa95bda15e9db10192252d2a14f008ac5"}) 06:03:04 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x7fffffff}, @SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x5, 0x7fffffff, 0xf51]}]}, 0x34}, 0x1, 0x0, 0x0, 0xcabc1a486a25cc01}, 0x20) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000040)=0x3f) socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") sendto$inet(r3, &(0x7f00000001c0)="79ef2efa19a3b8b59274cf91a5a1bbf216526b8432619db2e9ac6528551f2c1cf7a7b4000ba645f0c822cdeb4049efa27f974a9caa0ea10fc21d4f7e0f6f983f053386054efe99e654c15abcdcdf7bbb1be60acd8596417438dd460c19b445a368d3d80de7fdddbddb0d6dcd002166ef74145b3193f04793766e25106eb9c56e621764ce131593e310ea3559219d2514521782343a65a45715b9f547f2f3706593a79dad50471eb8ebe2cc8887cc82a63d8393d5b660b4edbfda09bf844cb01960e72ffc3f1cd3e9c58551b671f95ec472fb2f96485b", 0xd6, 0x800, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x894a, &(0x7f00000002c0)={'eq\x04\x00\x00\x00\x00\x00GF=\x8c\x03\xca\xc3\x14', @ifru_data=&(0x7f0000000140)="a5d0a17fcf3ef989a30415d13e88c46c99df0d9d2a6d524be9bf079cf915f240"}) 06:03:05 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4b40, 0x0) 06:03:05 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, 0x0, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1100000000000000, r0, 0x0}]) 06:03:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4b49, 0x0) 06:03:05 executing program 2 (fault-call:7 fault-nth:0): pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:03:05 executing program 3: r0 = socket$inet(0x2, 0x800, 0x80000001) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x80000000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:05 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x0, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x100000001) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000080)={0x69c, 0x3, 0x2, 0x809, 0x3}) [ 439.832847] FAULT_INJECTION: forcing a failure. [ 439.832847] name failslab, interval 1, probability 0, space 0, times 0 [ 439.872981] CPU: 0 PID: 21830 Comm: syz-executor.2 Not tainted 4.19.74 #0 [ 439.879945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.889303] Call Trace: [ 439.891909] dump_stack+0x172/0x1f0 [ 439.895558] should_fail.cold+0xa/0x1b [ 439.899460] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 439.904572] ? lock_downgrade+0x810/0x810 [ 439.908741] __should_failslab+0x121/0x190 [ 439.913000] should_failslab+0x9/0x14 [ 439.916816] kmem_cache_alloc_node+0x26c/0x710 [ 439.921405] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 439.927063] ? tcp_established_options+0x2ae/0x480 [ 439.932098] __alloc_skb+0xd5/0x5f0 [ 439.935734] ? skb_scrub_packet+0x490/0x490 [ 439.940062] sk_stream_alloc_skb+0xc8/0x860 [ 439.944376] do_tcp_sendpages+0x8f5/0x1a10 [ 439.948604] ? find_held_lock+0x35/0x130 [ 439.952653] ? mark_held_locks+0xb1/0x100 [ 439.956791] ? sk_stream_alloc_skb+0x860/0x860 [ 439.961360] ? __local_bh_enable_ip+0x15a/0x270 [ 439.966025] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 439.971029] tcp_sendpage_locked+0x84/0xd0 [ 439.975252] tcp_sendpage+0x3f/0x60 [ 439.978870] ? tcp_sendpage_locked+0xd0/0xd0 [ 439.983322] inet_sendpage+0x168/0x630 [ 439.987203] kernel_sendpage+0x92/0xf0 [ 439.991076] ? inet_sendmsg+0x5d0/0x5d0 [ 439.995041] sock_sendpage+0x8b/0xc0 [ 439.998776] pipe_to_sendpage+0x296/0x360 [ 440.002922] ? kernel_sendpage+0xf0/0xf0 [ 440.006971] ? direct_splice_actor+0x190/0x190 [ 440.011541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.017064] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 440.022432] __splice_from_pipe+0x391/0x7d0 [ 440.026752] ? direct_splice_actor+0x190/0x190 [ 440.031337] ? direct_splice_actor+0x190/0x190 [ 440.035907] splice_from_pipe+0x108/0x170 [ 440.040055] ? splice_shrink_spd+0xd0/0xd0 [ 440.044288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.049818] ? security_file_permission+0x89/0x230 [ 440.054744] generic_splice_sendpage+0x3c/0x50 [ 440.059315] ? splice_from_pipe+0x170/0x170 [ 440.063625] do_splice+0x642/0x12c0 [ 440.067248] ? opipe_prep.part.0+0x2d0/0x2d0 [ 440.071648] ? __fget_light+0x1a9/0x230 [ 440.075611] __x64_sys_splice+0x2c6/0x330 [ 440.079756] do_syscall_64+0xfd/0x620 [ 440.083553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.088728] RIP: 0033:0x459a09 [ 440.091909] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.110794] RSP: 002b:00007f51b378cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 440.118492] RAX: ffffffffffffffda RBX: 00007f51b378cc90 RCX: 0000000000459a09 [ 440.125745] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 06:03:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x2000000000000000, r0, 0x0}]) [ 440.133001] RBP: 000000000075bfc8 R08: 0000000000004b40 R09: 0000000000000000 [ 440.140254] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f51b378d6d4 [ 440.147507] R13: 00000000004c9202 R14: 00000000004df800 R15: 0000000000000006 06:03:05 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x0, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x541b, 0x0) 06:03:05 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:03:05 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x7bb7, 0x2000) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000080)=""/149) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 06:03:05 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3d49d1993f000000, r0, 0x0}]) 06:03:05 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x0, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:05 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:03:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0xd48, &(0x7f0000000080)=0x4) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:06 executing program 4 (fault-call:4 fault-nth:0): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 06:03:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x3f00000000000000, r0, 0x0}]) [ 440.849491] FAULT_INJECTION: forcing a failure. [ 440.849491] name failslab, interval 1, probability 0, space 0, times 0 [ 440.871055] CPU: 1 PID: 21886 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 440.878031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.887394] Call Trace: [ 440.887419] dump_stack+0x172/0x1f0 [ 440.887443] should_fail.cold+0xa/0x1b [ 440.887459] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 440.887474] ? lock_downgrade+0x810/0x810 [ 440.887497] __should_failslab+0x121/0x190 [ 440.887515] should_failslab+0x9/0x14 [ 440.887530] kmem_cache_alloc_node+0x26c/0x710 [ 440.887553] __alloc_skb+0xd5/0x5f0 [ 440.887569] ? skb_scrub_packet+0x490/0x490 [ 440.887586] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.887679] ? netlink_autobind.isra.0+0x228/0x310 [ 440.887698] netlink_sendmsg+0x97b/0xd70 [ 440.902889] ? netlink_unicast+0x720/0x720 [ 440.902913] ? selinux_socket_sendmsg+0x36/0x40 [ 440.902928] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.902943] ? security_socket_sendmsg+0x8d/0xc0 [ 440.961142] ? netlink_unicast+0x720/0x720 [ 440.965371] sock_sendmsg+0xd7/0x130 [ 440.969074] ___sys_sendmsg+0x803/0x920 [ 440.973038] ? copy_msghdr_from_user+0x430/0x430 [ 440.977785] ? lock_downgrade+0x810/0x810 [ 440.981945] ? kasan_check_read+0x11/0x20 [ 440.986101] ? __fget+0x367/0x540 [ 440.989572] ? iterate_fd+0x360/0x360 [ 440.993373] ? __fget_light+0x1a9/0x230 [ 440.997339] ? __fdget+0x1b/0x20 [ 441.000699] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.006233] __sys_sendmsg+0x105/0x1d0 [ 441.010114] ? __ia32_sys_shutdown+0x80/0x80 [ 441.014531] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.019276] ? do_syscall_64+0x26/0x620 [ 441.023239] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.028588] ? do_syscall_64+0x26/0x620 [ 441.032551] __x64_sys_sendmsg+0x78/0xb0 [ 441.036600] do_syscall_64+0xfd/0x620 [ 441.040392] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.045567] RIP: 0033:0x459a09 [ 441.048747] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.067633] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.075331] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 441.082594] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 441.089848] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:03:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xd0680, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x20000073, [0x7ff, 0x6, 0x8000, 0x5, 0x3]}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 441.097106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 441.104359] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:06 executing program 4 (fault-call:4 fault-nth:1): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 441.266044] FAULT_INJECTION: forcing a failure. [ 441.266044] name failslab, interval 1, probability 0, space 0, times 0 [ 441.278089] CPU: 1 PID: 21902 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 441.285079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.294417] Call Trace: [ 441.297006] dump_stack+0x172/0x1f0 [ 441.300634] should_fail.cold+0xa/0x1b [ 441.304520] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 441.309618] ? lock_downgrade+0x810/0x810 [ 441.313793] __should_failslab+0x121/0x190 [ 441.318048] should_failslab+0x9/0x14 [ 441.321853] kmem_cache_alloc_node_trace+0x274/0x720 [ 441.326946] ? __alloc_skb+0xd5/0x5f0 [ 441.330759] __kmalloc_node_track_caller+0x3d/0x80 [ 441.335682] __kmalloc_reserve.isra.0+0x40/0xf0 [ 441.340348] __alloc_skb+0x10b/0x5f0 [ 441.344067] ? skb_scrub_packet+0x490/0x490 [ 441.348398] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.353930] ? netlink_autobind.isra.0+0x228/0x310 [ 441.358864] netlink_sendmsg+0x97b/0xd70 [ 441.362922] ? netlink_unicast+0x720/0x720 [ 441.367150] ? selinux_socket_sendmsg+0x36/0x40 [ 441.371816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.377338] ? security_socket_sendmsg+0x8d/0xc0 [ 441.382077] ? netlink_unicast+0x720/0x720 [ 441.386296] sock_sendmsg+0xd7/0x130 [ 441.390007] ___sys_sendmsg+0x803/0x920 [ 441.394000] ? copy_msghdr_from_user+0x430/0x430 [ 441.398762] ? lock_downgrade+0x810/0x810 [ 441.402917] ? kasan_check_read+0x11/0x20 [ 441.407062] ? __fget+0x367/0x540 [ 441.410607] ? iterate_fd+0x360/0x360 [ 441.414398] ? __fget_light+0x1a9/0x230 [ 441.418369] ? __fdget+0x1b/0x20 [ 441.421731] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.427253] __sys_sendmsg+0x105/0x1d0 [ 441.431126] ? __ia32_sys_shutdown+0x80/0x80 [ 441.435529] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.440280] ? do_syscall_64+0x26/0x620 [ 441.444248] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.449605] ? do_syscall_64+0x26/0x620 [ 441.453576] __x64_sys_sendmsg+0x78/0xb0 [ 441.457672] do_syscall_64+0xfd/0x620 [ 441.461460] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.466631] RIP: 0033:0x459a09 [ 441.469815] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.488728] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.496446] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 441.503736] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 06:03:06 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) 06:03:06 executing program 3: socket$isdn_base(0x22, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x3}) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x5d9f, 0x800) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000100)=0x54) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) accept$ax25(r2, &(0x7f0000000140)={{}, [@default, @netrom, @rose, @netrom, @rose, @netrom, @rose, @default]}, &(0x7f00000001c0)=0x48) 06:03:06 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 06:03:06 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4000000000000000, r0, 0x0}]) 06:03:06 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b02, 0x0) [ 441.511013] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.518291] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 441.525564] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:06 executing program 4 (fault-call:4 fault-nth:2): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x401f000000000000, r0, 0x0}]) 06:03:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) [ 441.696348] FAULT_INJECTION: forcing a failure. [ 441.696348] name failslab, interval 1, probability 0, space 0, times 0 [ 441.734505] CPU: 1 PID: 21923 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 441.741471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.750832] Call Trace: [ 441.753434] dump_stack+0x172/0x1f0 [ 441.757082] should_fail.cold+0xa/0x1b [ 441.760984] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 441.766103] ? netlink_deliver_tap+0x146/0xc20 [ 441.770709] __should_failslab+0x121/0x190 [ 441.775046] should_failslab+0x9/0x14 [ 441.778857] kmem_cache_alloc+0x47/0x700 [ 441.782930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.788478] ? check_preemption_disabled+0x48/0x290 [ 441.793500] ? lock_acquire+0x16f/0x3f0 [ 441.797487] skb_clone+0x156/0x3e0 [ 441.801040] netlink_deliver_tap+0x97b/0xc20 [ 441.805448] netlink_unicast+0x5a8/0x720 [ 441.809500] ? netlink_attachskb+0x770/0x770 [ 441.813903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.819435] netlink_sendmsg+0x8ae/0xd70 [ 441.823491] ? netlink_unicast+0x720/0x720 [ 441.827719] ? selinux_socket_sendmsg+0x36/0x40 [ 441.832376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.837900] ? security_socket_sendmsg+0x8d/0xc0 [ 441.842646] ? netlink_unicast+0x720/0x720 [ 441.846869] sock_sendmsg+0xd7/0x130 [ 441.850569] ___sys_sendmsg+0x803/0x920 [ 441.854533] ? copy_msghdr_from_user+0x430/0x430 [ 441.859278] ? lock_downgrade+0x810/0x810 [ 441.863415] ? kasan_check_read+0x11/0x20 [ 441.867567] ? __fget+0x367/0x540 [ 441.871010] ? iterate_fd+0x360/0x360 [ 441.874807] ? __fget_light+0x1a9/0x230 [ 441.878769] ? __fdget+0x1b/0x20 [ 441.882129] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.887658] __sys_sendmsg+0x105/0x1d0 [ 441.891532] ? __ia32_sys_shutdown+0x80/0x80 [ 441.895942] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.900684] ? do_syscall_64+0x26/0x620 [ 441.904651] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.909999] ? do_syscall_64+0x26/0x620 [ 441.913970] __x64_sys_sendmsg+0x78/0xb0 [ 441.918020] do_syscall_64+0xfd/0x620 [ 441.921808] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.926983] RIP: 0033:0x459a09 06:03:07 executing program 3: openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x2, 0x0, &(0x7f0000000080)) getpeername(r4, &(0x7f00000002c0)=@hci, &(0x7f0000000340)=0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000f00b81ca0b5d53c374e07b49c875946b3dd4b27b1f91cacf056de5793ca8a33b95154ac5bb4ed1a7e82b569cfb67162297138d4bedd16901b1fb854ea817d4cbd068984db49cd4466508004f482e76354901c66de54becd777c39ed75a3840dce57bf6a000ad9cbf775f8bd6785233e24d764e48cec446205a654187cadd7905a053a6f2b4e54bd98be5a30cc6129945db4bfc5a07266256751d3006c3e23246f306266ea2e5a04397a49164437c57d9722db7ffd3df73876c4808a903e501a96c216e03d60b1774362efc1c37dbfb37acc53c6dd482c489f392", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000005c0)={0x3, 0x1, 0x0, 0x0, r5}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={r5, @in6={{0xa, 0x4e24, 0xff, @mcast1, 0xffffffff}}, 0x5, 0x6}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r6, @in={{0x2, 0x4e20, @local}}, 0x81, 0xb35}, &(0x7f0000000240)=0x90) [ 441.930162] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.949747] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.957441] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 441.964696] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 441.971959] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 441.979213] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 441.986471] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:07 executing program 4 (fault-call:4 fault-nth:3): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 06:03:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x4d01000000000000, r0, 0x0}]) [ 442.145101] FAULT_INJECTION: forcing a failure. [ 442.145101] name failslab, interval 1, probability 0, space 0, times 0 [ 442.165063] CPU: 0 PID: 21941 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 442.172005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.172053] Call Trace: [ 442.183989] dump_stack+0x172/0x1f0 [ 442.184011] should_fail.cold+0xa/0x1b [ 442.184027] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 442.184044] ? lock_downgrade+0x810/0x810 [ 442.200756] __should_failslab+0x121/0x190 [ 442.204985] should_failslab+0x9/0x14 [ 442.208775] kmem_cache_alloc_node+0x26c/0x710 [ 442.213344] ? save_stack+0x45/0xd0 [ 442.216955] ? __kasan_slab_free+0x102/0x150 [ 442.221350] ? kasan_slab_free+0xe/0x10 [ 442.225314] ? kmem_cache_free+0x86/0x260 [ 442.229453] __alloc_skb+0xd5/0x5f0 [ 442.233067] ? skb_scrub_packet+0x490/0x490 [ 442.237421] tipc_tlv_alloc+0x2a/0xb0 [ 442.241214] tipc_nl_compat_dumpit+0x14f/0x510 [ 442.245785] tipc_nl_compat_recv+0x5a6/0xaf0 [ 442.250185] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 442.254756] ? tipc_dump_start+0x90/0x90 [ 442.258819] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 442.264342] ? retint_kernel+0x2d/0x2d [ 442.268230] ? genl_family_rcv_msg+0x275/0xd30 [ 442.272805] genl_family_rcv_msg+0x6db/0xd30 [ 442.277205] ? genl_unregister_family+0x790/0x790 [ 442.282037] ? __local_bh_enable_ip+0x15a/0x270 [ 442.286749] ? __dev_queue_xmit+0x892/0x2fe0 [ 442.291162] genl_rcv_msg+0xca/0x170 [ 442.294865] netlink_rcv_skb+0x17d/0x460 [ 442.298915] ? genl_family_rcv_msg+0xd30/0xd30 [ 442.303487] ? netlink_ack+0xb30/0xb30 [ 442.307372] genl_rcv+0x29/0x40 [ 442.310638] netlink_unicast+0x537/0x720 [ 442.314692] ? netlink_attachskb+0x770/0x770 [ 442.319090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.324619] netlink_sendmsg+0x8ae/0xd70 [ 442.328678] ? netlink_unicast+0x720/0x720 [ 442.332905] ? selinux_socket_sendmsg+0x36/0x40 [ 442.337560] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.343082] ? security_socket_sendmsg+0x8d/0xc0 [ 442.347821] ? netlink_unicast+0x720/0x720 [ 442.352044] sock_sendmsg+0xd7/0x130 [ 442.355744] ___sys_sendmsg+0x803/0x920 [ 442.359707] ? copy_msghdr_from_user+0x430/0x430 [ 442.364454] ? lock_downgrade+0x810/0x810 [ 442.368591] ? kasan_check_read+0x11/0x20 [ 442.372730] ? __fget+0x367/0x540 [ 442.376175] ? iterate_fd+0x360/0x360 [ 442.379974] ? __fget_light+0x1a9/0x230 [ 442.383935] ? __fdget+0x1b/0x20 [ 442.387290] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.392814] __sys_sendmsg+0x105/0x1d0 [ 442.396696] ? __ia32_sys_shutdown+0x80/0x80 [ 442.401099] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 442.405841] ? do_syscall_64+0x26/0x620 [ 442.409799] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.415147] ? do_syscall_64+0x26/0x620 [ 442.419111] __x64_sys_sendmsg+0x78/0xb0 [ 442.423160] do_syscall_64+0xfd/0x620 [ 442.426948] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.432142] RIP: 0033:0x459a09 [ 442.435328] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.454213] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.461909] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 442.469164] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 442.476418] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.483676] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 06:03:07 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x0, 0x0) [ 442.490931] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:07 executing program 4 (fault-call:4 fault-nth:4): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 06:03:07 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x2) 06:03:07 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7c15000000000000, r0, 0x0}]) [ 442.655027] FAULT_INJECTION: forcing a failure. [ 442.655027] name failslab, interval 1, probability 0, space 0, times 0 [ 442.679772] CPU: 1 PID: 21962 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 442.686722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 442.696075] Call Trace: [ 442.698673] dump_stack+0x172/0x1f0 [ 442.702316] should_fail.cold+0xa/0x1b [ 442.706219] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 442.706238] ? lock_downgrade+0x810/0x810 [ 442.715480] __should_failslab+0x121/0x190 [ 442.719730] should_failslab+0x9/0x14 [ 442.723540] kmem_cache_alloc_node_trace+0x274/0x720 [ 442.728643] ? __alloc_skb+0xd5/0x5f0 [ 442.728666] __kmalloc_node_track_caller+0x3d/0x80 [ 442.728681] __kmalloc_reserve.isra.0+0x40/0xf0 [ 442.742059] __alloc_skb+0x10b/0x5f0 [ 442.745774] ? skb_scrub_packet+0x490/0x490 [ 442.750095] tipc_tlv_alloc+0x2a/0xb0 [ 442.753882] tipc_nl_compat_dumpit+0x14f/0x510 [ 442.758453] tipc_nl_compat_recv+0x5a6/0xaf0 [ 442.762852] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 442.767425] ? __lock_is_held+0xb6/0x140 [ 442.771478] ? tipc_dump_start+0x90/0x90 [ 442.775523] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 442.781045] ? genl_rcv_msg+0x13e/0x170 [ 442.785127] genl_family_rcv_msg+0x6db/0xd30 [ 442.789530] ? genl_unregister_family+0x790/0x790 [ 442.794363] ? __local_bh_enable_ip+0x15a/0x270 [ 442.799025] ? __dev_queue_xmit+0x892/0x2fe0 [ 442.803430] genl_rcv_msg+0xca/0x170 [ 442.807133] netlink_rcv_skb+0x17d/0x460 [ 442.811189] ? genl_family_rcv_msg+0xd30/0xd30 [ 442.815755] ? netlink_ack+0xb30/0xb30 [ 442.819638] genl_rcv+0x29/0x40 [ 442.822901] netlink_unicast+0x537/0x720 [ 442.826952] ? netlink_attachskb+0x770/0x770 [ 442.831352] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.836878] netlink_sendmsg+0x8ae/0xd70 [ 442.840930] ? netlink_unicast+0x720/0x720 [ 442.845174] ? selinux_socket_sendmsg+0x36/0x40 [ 442.849834] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 442.855365] ? security_socket_sendmsg+0x8d/0xc0 [ 442.860113] ? netlink_unicast+0x720/0x720 [ 442.864337] sock_sendmsg+0xd7/0x130 [ 442.868044] ___sys_sendmsg+0x803/0x920 [ 442.872013] ? copy_msghdr_from_user+0x430/0x430 [ 442.876761] ? lock_downgrade+0x810/0x810 [ 442.880905] ? kasan_check_read+0x11/0x20 [ 442.885046] ? __fget+0x367/0x540 [ 442.888495] ? iterate_fd+0x360/0x360 [ 442.892305] ? __fget_light+0x1a9/0x230 [ 442.896269] ? __fdget+0x1b/0x20 [ 442.899624] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 442.905152] __sys_sendmsg+0x105/0x1d0 [ 442.909026] ? __ia32_sys_shutdown+0x80/0x80 [ 442.913429] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 442.918173] ? do_syscall_64+0x26/0x620 [ 442.922133] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.927481] ? do_syscall_64+0x26/0x620 [ 442.931446] __x64_sys_sendmsg+0x78/0xb0 [ 442.935495] do_syscall_64+0xfd/0x620 [ 442.939288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 442.944461] RIP: 0033:0x459a09 [ 442.947642] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 442.966535] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.974236] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 442.981494] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 442.988751] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 442.996004] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 06:03:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000100)={0x8, 0x7fffffff, 0xf1d, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'rose0\x00'}) [ 443.003375] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:08 executing program 4 (fault-call:4 fault-nth:5): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x8000000000000000, r0, 0x0}]) 06:03:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 06:03:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x200}) [ 443.109093] FAULT_INJECTION: forcing a failure. [ 443.109093] name failslab, interval 1, probability 0, space 0, times 0 [ 443.177148] CPU: 1 PID: 21980 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 443.184124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.193484] Call Trace: [ 443.196086] dump_stack+0x172/0x1f0 [ 443.199736] should_fail.cold+0xa/0x1b [ 443.203640] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 443.208745] ? lock_downgrade+0x810/0x810 [ 443.212893] __should_failslab+0x121/0x190 [ 443.217119] should_failslab+0x9/0x14 [ 443.220908] kmem_cache_alloc_node+0x26c/0x710 [ 443.225483] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.231010] __alloc_skb+0xd5/0x5f0 [ 443.234623] ? skb_scrub_packet+0x490/0x490 [ 443.238930] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.243928] ? skb_put+0x183/0x1e0 [ 443.247457] tipc_nl_compat_dumpit+0x228/0x510 [ 443.252027] tipc_nl_compat_recv+0x5a6/0xaf0 [ 443.256427] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 443.260996] ? __lock_is_held+0xb6/0x140 [ 443.265045] ? tipc_dump_start+0x90/0x90 [ 443.269091] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 443.274625] ? genl_rcv_msg+0x13e/0x170 [ 443.278598] genl_family_rcv_msg+0x6db/0xd30 [ 443.282999] ? genl_unregister_family+0x790/0x790 [ 443.287831] ? __local_bh_enable_ip+0x15a/0x270 [ 443.292491] ? __dev_queue_xmit+0x892/0x2fe0 [ 443.296898] genl_rcv_msg+0xca/0x170 [ 443.300600] netlink_rcv_skb+0x17d/0x460 [ 443.304649] ? genl_family_rcv_msg+0xd30/0xd30 [ 443.309221] ? netlink_ack+0xb30/0xb30 [ 443.313108] genl_rcv+0x29/0x40 [ 443.316377] netlink_unicast+0x537/0x720 [ 443.320428] ? netlink_attachskb+0x770/0x770 [ 443.324832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.330358] netlink_sendmsg+0x8ae/0xd70 [ 443.334412] ? netlink_unicast+0x720/0x720 [ 443.338641] ? selinux_socket_sendmsg+0x36/0x40 [ 443.343297] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.348820] ? security_socket_sendmsg+0x8d/0xc0 [ 443.353568] ? netlink_unicast+0x720/0x720 [ 443.357792] sock_sendmsg+0xd7/0x130 [ 443.361495] ___sys_sendmsg+0x803/0x920 [ 443.365469] ? copy_msghdr_from_user+0x430/0x430 [ 443.370216] ? lock_downgrade+0x810/0x810 [ 443.374357] ? kasan_check_read+0x11/0x20 [ 443.378495] ? __fget+0x367/0x540 [ 443.381939] ? iterate_fd+0x360/0x360 [ 443.385734] ? __fget_light+0x1a9/0x230 [ 443.389695] ? __fdget+0x1b/0x20 [ 443.393046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.398573] __sys_sendmsg+0x105/0x1d0 [ 443.402446] ? __ia32_sys_shutdown+0x80/0x80 [ 443.406859] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 443.411600] ? do_syscall_64+0x26/0x620 [ 443.415563] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.420913] ? do_syscall_64+0x26/0x620 [ 443.424878] __x64_sys_sendmsg+0x78/0xb0 [ 443.428927] do_syscall_64+0xfd/0x620 [ 443.432718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.437890] RIP: 0033:0x459a09 [ 443.441068] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.459955] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.467655] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 06:03:08 executing program 0 (fault-call:8 fault-nth:0): pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) [ 443.474915] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 443.482172] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.489440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 443.496695] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = semget(0x0, 0x2, 0x121) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r3, 0x65, 0x2, 0x0, &(0x7f0000000080)) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x4, 0x1, 0x2, 0x1, {0xa, 0x4e22, 0x3f, @mcast1, 0x1}}}, 0x3a) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000040)=""/255, &(0x7f0000000140)=0xff) 06:03:08 executing program 4 (fault-call:4 fault-nth:6): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:08 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x9a02000000000000, r0, 0x0}]) [ 443.659825] FAULT_INJECTION: forcing a failure. [ 443.659825] name failslab, interval 1, probability 0, space 0, times 0 [ 443.677628] FAULT_INJECTION: forcing a failure. [ 443.677628] name failslab, interval 1, probability 0, space 0, times 0 [ 443.691394] CPU: 1 PID: 22000 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 443.698349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 443.707706] Call Trace: [ 443.710311] dump_stack+0x172/0x1f0 [ 443.713956] should_fail.cold+0xa/0x1b [ 443.717870] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 443.722979] ? lock_downgrade+0x810/0x810 [ 443.727146] __should_failslab+0x121/0x190 [ 443.731392] should_failslab+0x9/0x14 [ 443.735198] kmem_cache_alloc_node_trace+0x274/0x720 [ 443.740306] ? __alloc_skb+0xd5/0x5f0 [ 443.744126] __kmalloc_node_track_caller+0x3d/0x80 [ 443.749073] __kmalloc_reserve.isra.0+0x40/0xf0 [ 443.753748] __alloc_skb+0x10b/0x5f0 [ 443.757463] ? skb_scrub_packet+0x490/0x490 [ 443.761786] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 443.766800] ? skb_put+0x183/0x1e0 [ 443.770347] tipc_nl_compat_dumpit+0x228/0x510 [ 443.774935] tipc_nl_compat_recv+0x5a6/0xaf0 [ 443.779348] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 443.783928] ? __lock_is_held+0xb6/0x140 [ 443.787998] ? tipc_dump_start+0x90/0x90 [ 443.792060] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 443.797597] ? genl_rcv_msg+0x13e/0x170 [ 443.801590] genl_family_rcv_msg+0x6db/0xd30 [ 443.806001] ? genl_unregister_family+0x790/0x790 [ 443.810852] ? rcu_read_unlock_special+0x679/0xea0 [ 443.815802] ? find_held_lock+0x35/0x130 [ 443.819888] genl_rcv_msg+0xca/0x170 [ 443.823607] netlink_rcv_skb+0x17d/0x460 [ 443.827857] ? genl_family_rcv_msg+0xd30/0xd30 [ 443.832450] ? netlink_ack+0xb30/0xb30 [ 443.836357] genl_rcv+0x29/0x40 [ 443.839650] netlink_unicast+0x537/0x720 [ 443.843724] ? netlink_attachskb+0x770/0x770 [ 443.848154] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.853718] netlink_sendmsg+0x8ae/0xd70 [ 443.857791] ? netlink_unicast+0x720/0x720 [ 443.862160] ? selinux_socket_sendmsg+0x36/0x40 [ 443.866838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 443.872378] ? security_socket_sendmsg+0x8d/0xc0 [ 443.877138] ? netlink_unicast+0x720/0x720 [ 443.881386] sock_sendmsg+0xd7/0x130 [ 443.885121] ___sys_sendmsg+0x803/0x920 [ 443.889133] ? copy_msghdr_from_user+0x430/0x430 [ 443.893896] ? lock_downgrade+0x810/0x810 [ 443.898053] ? kasan_check_read+0x11/0x20 [ 443.902210] ? __fget+0x367/0x540 [ 443.905672] ? iterate_fd+0x360/0x360 [ 443.909483] ? __fget_light+0x1a9/0x230 [ 443.913455] ? __fdget+0x1b/0x20 [ 443.916820] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 443.922371] __sys_sendmsg+0x105/0x1d0 [ 443.926258] ? __ia32_sys_shutdown+0x80/0x80 [ 443.930684] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 443.935446] ? do_syscall_64+0x26/0x620 [ 443.939423] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.944785] ? do_syscall_64+0x26/0x620 [ 443.948764] __x64_sys_sendmsg+0x78/0xb0 [ 443.952834] do_syscall_64+0xfd/0x620 [ 443.956648] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 443.961841] RIP: 0033:0x459a09 [ 443.965038] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 443.983946] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.991663] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 443.991672] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 06:03:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) [ 443.991680] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 443.991687] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 443.991695] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 [ 444.041969] CPU: 0 PID: 22002 Comm: syz-executor.0 Not tainted 4.19.74 #0 [ 444.048938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.058297] Call Trace: [ 444.060882] dump_stack+0x172/0x1f0 [ 444.064510] should_fail.cold+0xa/0x1b [ 444.068391] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 444.073487] ? lock_downgrade+0x810/0x810 [ 444.077635] __should_failslab+0x121/0x190 [ 444.081862] should_failslab+0x9/0x14 [ 444.085651] kmem_cache_alloc_node+0x26c/0x710 [ 444.090226] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.095754] ? tcp_established_options+0x2ae/0x480 [ 444.100678] __alloc_skb+0xd5/0x5f0 [ 444.104310] ? skb_scrub_packet+0x490/0x490 [ 444.108629] sk_stream_alloc_skb+0xc8/0x860 [ 444.112940] do_tcp_sendpages+0x8f5/0x1a10 [ 444.117167] ? find_held_lock+0x35/0x130 [ 444.121218] ? mark_held_locks+0xb1/0x100 [ 444.125354] ? sk_stream_alloc_skb+0x860/0x860 [ 444.129924] ? __local_bh_enable_ip+0x15a/0x270 [ 444.134588] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.139593] tcp_sendpage_locked+0x84/0xd0 [ 444.143828] tcp_sendpage+0x3f/0x60 [ 444.147448] ? tcp_sendpage_locked+0xd0/0xd0 [ 444.151846] inet_sendpage+0x168/0x630 [ 444.155724] kernel_sendpage+0x92/0xf0 [ 444.159596] ? inet_sendmsg+0x5d0/0x5d0 [ 444.163561] sock_sendpage+0x8b/0xc0 [ 444.167265] pipe_to_sendpage+0x296/0x360 [ 444.171400] ? kernel_sendpage+0xf0/0xf0 [ 444.175447] ? direct_splice_actor+0x190/0x190 [ 444.180016] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.185542] ? splice_from_pipe_next.part.0+0x255/0x2f0 [ 444.190897] __splice_from_pipe+0x391/0x7d0 [ 444.195212] ? direct_splice_actor+0x190/0x190 [ 444.199783] ? direct_splice_actor+0x190/0x190 [ 444.204351] splice_from_pipe+0x108/0x170 [ 444.208492] ? splice_shrink_spd+0xd0/0xd0 [ 444.212721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.218244] ? security_file_permission+0x89/0x230 [ 444.223165] generic_splice_sendpage+0x3c/0x50 [ 444.227733] ? splice_from_pipe+0x170/0x170 [ 444.232044] do_splice+0x642/0x12c0 [ 444.235663] ? opipe_prep.part.0+0x2d0/0x2d0 [ 444.240061] ? __fget_light+0x1a9/0x230 [ 444.244024] __x64_sys_splice+0x2c6/0x330 [ 444.248164] do_syscall_64+0xfd/0x620 [ 444.251955] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.257127] RIP: 0033:0x459a09 [ 444.260307] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.279380] RSP: 002b:00007f49f039ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 444.287076] RAX: ffffffffffffffda RBX: 00007f49f039ec90 RCX: 0000000000459a09 [ 444.294330] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 444.301585] RBP: 000000000075bfc8 R08: 0000000000004b40 R09: 0000000000000000 06:03:09 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x3) 06:03:09 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x7, 0x88842) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xf98a, 0x200, 0x1, 0x1f, r5}, &(0x7f0000000140)=0x10) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x1, 0x0, 0x7}, 0x10) r7 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r7, 0x8038550a, 0x0) bind$bt_rfcomm(r7, &(0x7f0000000280)={0x1f, {0x9, 0xffffffff, 0x7, 0x5, 0x40, 0xfffffffffffffffc}, 0xfff}, 0xa) r8 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r8, 0x8038550a, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r8, &(0x7f0000000340)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x358, r10, 0xc858227fd638d651, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x18c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3000000000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x73b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2e19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbc56}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x44, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfffffffffffff000}}}}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}]}, @TIPC_NLA_LINK={0x12c, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf30}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e36}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}]}, 0x358}, 0x1, 0x0, 0x0, 0x20048800}, 0x40) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r6, 0x2}, 0x8) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000040)={0x2}, 0x4) ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000000000)={'rose0\x00', @ifru_settings={0x1, 0x7, @cisco=&(0x7f0000000080)={0x3, 0x3b2b}}}) [ 444.308837] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f039f6d4 [ 444.316091] R13: 00000000004c9202 R14: 00000000004df800 R15: 0000000000000006 06:03:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfeffffff00000000, r0, 0x0}]) 06:03:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 06:03:09 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x0) 06:03:09 executing program 4 (fault-call:4 fault-nth:7): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 444.500133] Started in network mode [ 444.512605] Own node identity , cluster identity 4711 06:03:09 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xffffff7f00000000, r0, 0x0}]) [ 444.541224] FAULT_INJECTION: forcing a failure. [ 444.541224] name failslab, interval 1, probability 0, space 0, times 0 [ 444.585185] CPU: 1 PID: 22033 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 444.592148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.601507] Call Trace: [ 444.604109] dump_stack+0x172/0x1f0 [ 444.607752] should_fail.cold+0xa/0x1b [ 444.611661] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 444.616773] ? lock_downgrade+0x810/0x810 [ 444.620943] __should_failslab+0x121/0x190 [ 444.625199] should_failslab+0x9/0x14 [ 444.629003] kmem_cache_alloc_node_trace+0x274/0x720 [ 444.634116] ? __alloc_skb+0xd5/0x5f0 [ 444.637920] __kmalloc_node_track_caller+0x3d/0x80 [ 444.637937] __kmalloc_reserve.isra.0+0x40/0xf0 [ 444.637953] __alloc_skb+0x10b/0x5f0 [ 444.637978] ? skb_scrub_packet+0x490/0x490 [ 444.637997] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 444.638010] ? skb_put+0x183/0x1e0 [ 444.664168] tipc_nl_compat_dumpit+0x228/0x510 [ 444.668769] tipc_nl_compat_recv+0x5a6/0xaf0 [ 444.673184] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 444.677760] ? __lock_is_held+0xb6/0x140 [ 444.681814] ? tipc_dump_start+0x90/0x90 [ 444.685864] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 444.691391] ? genl_rcv_msg+0x13e/0x170 [ 444.695365] genl_family_rcv_msg+0x6db/0xd30 [ 444.699765] ? genl_unregister_family+0x790/0x790 [ 444.704596] ? __local_bh_enable_ip+0x15a/0x270 [ 444.709256] ? __dev_queue_xmit+0x892/0x2fe0 [ 444.713664] genl_rcv_msg+0xca/0x170 [ 444.717368] netlink_rcv_skb+0x17d/0x460 [ 444.721417] ? genl_family_rcv_msg+0xd30/0xd30 [ 444.725988] ? netlink_ack+0xb30/0xb30 [ 444.729872] genl_rcv+0x29/0x40 [ 444.733137] netlink_unicast+0x537/0x720 [ 444.737187] ? netlink_attachskb+0x770/0x770 [ 444.741585] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.747113] netlink_sendmsg+0x8ae/0xd70 [ 444.751163] ? netlink_unicast+0x720/0x720 [ 444.755388] ? selinux_socket_sendmsg+0x36/0x40 [ 444.760058] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.765581] ? security_socket_sendmsg+0x8d/0xc0 [ 444.770324] ? netlink_unicast+0x720/0x720 [ 444.774545] sock_sendmsg+0xd7/0x130 [ 444.778247] ___sys_sendmsg+0x803/0x920 [ 444.782212] ? copy_msghdr_from_user+0x430/0x430 [ 444.786963] ? lock_downgrade+0x810/0x810 [ 444.791101] ? kasan_check_read+0x11/0x20 [ 444.795237] ? __fget+0x367/0x540 [ 444.798682] ? iterate_fd+0x360/0x360 [ 444.802477] ? __fget_light+0x1a9/0x230 [ 444.806439] ? __fdget+0x1b/0x20 [ 444.809793] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 444.815317] __sys_sendmsg+0x105/0x1d0 [ 444.819194] ? __ia32_sys_shutdown+0x80/0x80 [ 444.823597] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.828339] ? do_syscall_64+0x26/0x620 [ 444.832301] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.837654] ? do_syscall_64+0x26/0x620 [ 444.841620] __x64_sys_sendmsg+0x78/0xb0 [ 444.845672] do_syscall_64+0xfd/0x620 [ 444.849466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.854639] RIP: 0033:0x459a09 [ 444.857820] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.876717] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:03:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40087602, 0x0) [ 444.884412] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 444.891666] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 444.898923] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 444.906179] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 444.913435] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xffffffff00000000, r0, 0x0}]) 06:03:10 executing program 4 (fault-call:4 fault-nth:8): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) [ 445.044276] FAULT_INJECTION: forcing a failure. [ 445.044276] name failslab, interval 1, probability 0, space 0, times 0 [ 445.056789] CPU: 0 PID: 22053 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 445.063739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.073091] Call Trace: [ 445.075673] dump_stack+0x172/0x1f0 [ 445.079301] should_fail.cold+0xa/0x1b [ 445.083184] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 445.088283] ? lock_downgrade+0x810/0x810 [ 445.092435] __should_failslab+0x121/0x190 [ 445.096661] should_failslab+0x9/0x14 [ 445.100449] kmem_cache_alloc_node_trace+0x274/0x720 [ 445.105543] ? __alloc_skb+0xd5/0x5f0 [ 445.109339] __kmalloc_node_track_caller+0x3d/0x80 [ 445.114256] __kmalloc_reserve.isra.0+0x40/0xf0 [ 445.118915] __alloc_skb+0x10b/0x5f0 [ 445.122618] ? skb_scrub_packet+0x490/0x490 [ 445.126939] __tipc_nl_compat_dumpit.isra.0+0xf2/0x950 [ 445.132205] ? kasan_unpoison_shadow+0x35/0x50 [ 445.136774] ? kasan_kmalloc+0xce/0xf0 [ 445.140656] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 445.145925] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.151462] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.156553] ? skb_put+0x183/0x1e0 [ 445.160086] tipc_nl_compat_dumpit+0x24c/0x510 [ 445.164669] tipc_nl_compat_recv+0x5a6/0xaf0 [ 445.169068] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 445.173636] ? __lock_is_held+0xb6/0x140 [ 445.177687] ? tipc_dump_start+0x90/0x90 [ 445.182006] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 445.187530] ? genl_rcv_msg+0x13e/0x170 [ 445.191505] genl_family_rcv_msg+0x6db/0xd30 [ 445.195907] ? genl_unregister_family+0x790/0x790 [ 445.200745] ? __local_bh_enable_ip+0x15a/0x270 [ 445.205406] ? __dev_queue_xmit+0x892/0x2fe0 [ 445.209812] genl_rcv_msg+0xca/0x170 [ 445.213600] netlink_rcv_skb+0x17d/0x460 [ 445.217649] ? genl_family_rcv_msg+0xd30/0xd30 [ 445.222217] ? netlink_ack+0xb30/0xb30 [ 445.226100] genl_rcv+0x29/0x40 [ 445.229363] netlink_unicast+0x537/0x720 [ 445.233417] ? netlink_attachskb+0x770/0x770 [ 445.237817] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.243342] netlink_sendmsg+0x8ae/0xd70 [ 445.247392] ? netlink_unicast+0x720/0x720 [ 445.251619] ? selinux_socket_sendmsg+0x36/0x40 [ 445.256272] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.261795] ? security_socket_sendmsg+0x8d/0xc0 [ 445.266538] ? netlink_unicast+0x720/0x720 [ 445.270759] sock_sendmsg+0xd7/0x130 [ 445.274463] ___sys_sendmsg+0x803/0x920 [ 445.278425] ? copy_msghdr_from_user+0x430/0x430 [ 445.283172] ? lock_downgrade+0x810/0x810 [ 445.287312] ? kasan_check_read+0x11/0x20 [ 445.291451] ? __fget+0x367/0x540 [ 445.294895] ? iterate_fd+0x360/0x360 [ 445.298696] ? __fget_light+0x1a9/0x230 [ 445.302661] ? __fdget+0x1b/0x20 [ 445.306013] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.311540] __sys_sendmsg+0x105/0x1d0 [ 445.315414] ? __ia32_sys_shutdown+0x80/0x80 [ 445.319819] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.324572] ? do_syscall_64+0x26/0x620 [ 445.328534] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.333883] ? do_syscall_64+0x26/0x620 [ 445.337853] __x64_sys_sendmsg+0x78/0xb0 [ 445.341906] do_syscall_64+0xfd/0x620 [ 445.345701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.350874] RIP: 0033:0x459a09 [ 445.354056] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.372942] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.380638] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 445.387892] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 445.395151] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.402404] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 445.409656] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:10 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b02, 0x0) 06:03:10 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x5) [ 445.495699] Started in network mode [ 445.510464] Own node identity , cluster identity 4711 06:03:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x20000800019b09, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:10 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x2}]) 06:03:10 executing program 4 (fault-call:4 fault-nth:9): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:10 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) [ 445.628541] FAULT_INJECTION: forcing a failure. [ 445.628541] name failslab, interval 1, probability 0, space 0, times 0 [ 445.658428] CPU: 1 PID: 22077 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 445.665375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.674720] Call Trace: [ 445.677301] dump_stack+0x172/0x1f0 [ 445.680919] should_fail.cold+0xa/0x1b [ 445.684799] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 445.689892] ? lock_downgrade+0x810/0x810 [ 445.694035] __should_failslab+0x121/0x190 [ 445.698260] should_failslab+0x9/0x14 [ 445.702045] kmem_cache_alloc_trace+0x2cc/0x760 [ 445.706702] ? kasan_check_read+0x11/0x20 [ 445.710838] __tipc_dump_start+0x24b/0x3c0 [ 445.715066] __tipc_nl_compat_dumpit.isra.0+0x1a0/0x950 [ 445.720414] ? kasan_unpoison_shadow+0x35/0x50 [ 445.724982] ? kasan_kmalloc+0xce/0xf0 [ 445.728858] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 445.734124] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.739656] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 445.744660] ? skb_put+0x183/0x1e0 [ 445.748190] tipc_nl_compat_dumpit+0x24c/0x510 [ 445.752760] tipc_nl_compat_recv+0x5a6/0xaf0 [ 445.757159] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 445.761726] ? __lock_is_held+0xb6/0x140 [ 445.765776] ? tipc_dump_start+0x90/0x90 [ 445.769825] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 445.775351] ? genl_rcv_msg+0x13e/0x170 [ 445.779323] genl_family_rcv_msg+0x6db/0xd30 [ 445.783724] ? genl_unregister_family+0x790/0x790 [ 445.788556] ? __local_bh_enable_ip+0x15a/0x270 [ 445.793213] ? __dev_queue_xmit+0x892/0x2fe0 [ 445.797619] genl_rcv_msg+0xca/0x170 [ 445.801335] netlink_rcv_skb+0x17d/0x460 [ 445.805388] ? genl_family_rcv_msg+0xd30/0xd30 [ 445.809961] ? netlink_ack+0xb30/0xb30 [ 445.813844] genl_rcv+0x29/0x40 [ 445.817109] netlink_unicast+0x537/0x720 [ 445.821161] ? netlink_attachskb+0x770/0x770 [ 445.825568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.831091] netlink_sendmsg+0x8ae/0xd70 [ 445.835141] ? netlink_unicast+0x720/0x720 [ 445.839368] ? selinux_socket_sendmsg+0x36/0x40 [ 445.844027] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.849549] ? security_socket_sendmsg+0x8d/0xc0 [ 445.854287] ? netlink_unicast+0x720/0x720 [ 445.858510] sock_sendmsg+0xd7/0x130 [ 445.862212] ___sys_sendmsg+0x803/0x920 [ 445.866188] ? copy_msghdr_from_user+0x430/0x430 [ 445.870939] ? lock_downgrade+0x810/0x810 [ 445.875076] ? kasan_check_read+0x11/0x20 [ 445.879229] ? __fget+0x367/0x540 [ 445.882677] ? iterate_fd+0x360/0x360 [ 445.886474] ? __fget_light+0x1a9/0x230 [ 445.890436] ? __fdget+0x1b/0x20 [ 445.893789] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.899316] __sys_sendmsg+0x105/0x1d0 [ 445.903194] ? __ia32_sys_shutdown+0x80/0x80 [ 445.907599] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 445.912345] ? do_syscall_64+0x26/0x620 [ 445.916309] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.921671] ? do_syscall_64+0x26/0x620 [ 445.925643] __x64_sys_sendmsg+0x78/0xb0 [ 445.929694] do_syscall_64+0xfd/0x620 [ 445.933495] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.938673] RIP: 0033:0x459a09 [ 445.941862] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.960753] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.968451] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 06:03:11 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x8701, 0x5, 0x8, 0xffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) socket$inet6_sctp(0xa, 0x0, 0x84) [ 445.975707] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 445.982966] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 445.990223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 445.997478] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x3}]) 06:03:11 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 06:03:11 executing program 4 (fault-call:4 fault-nth:10): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:11 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x820002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) sendmsg$unix(r0, &(0x7f00000003c0)={&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)="3fe1ea6317ada4c8cff1f6f031a2bb73b2296e5cb6a63b57e01c49c354831a65442c7156b1b579281e420a9e130c2b430cf4434b6644a6537396b74bb4e29406626e121d09fa53afba2d27670f816b84e29aebd0cf45d8d0b52e7e8b601d3f03cc675b2a3d177a8885447ff6d41671ed1d08e1e4de9e797ee25cb0be653fcf8fdf74faba1e239a9f0e1ca15df807ce", 0x8f}], 0x1, &(0x7f0000000380), 0x0, 0x2049010}, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000100)={0x1, {{0xa, 0x4e24, 0x13793950, @dev={0xfe, 0x80, [], 0x21}, 0x2}}}, 0x88) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000380)={{0x100, 0x400, 0x40, 0x7, 0x401, 0x1}, 0x679}) [ 446.176673] FAULT_INJECTION: forcing a failure. [ 446.176673] name failslab, interval 1, probability 0, space 0, times 0 [ 446.188482] CPU: 0 PID: 22097 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 446.195424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.204770] Call Trace: [ 446.204790] dump_stack+0x172/0x1f0 [ 446.204811] should_fail.cold+0xa/0x1b [ 446.214882] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 446.219990] ? lock_downgrade+0x810/0x810 06:03:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x4}]) [ 446.220014] __should_failslab+0x121/0x190 [ 446.228371] should_failslab+0x9/0x14 [ 446.228386] kmem_cache_alloc_node+0x26c/0x710 [ 446.228409] __alloc_skb+0xd5/0x5f0 [ 446.240360] ? skb_scrub_packet+0x490/0x490 [ 446.240372] ? memset+0x32/0x40 [ 446.240391] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.247965] tipc_nl_compat_sk_dump+0x46f/0x950 [ 446.247986] ? rhashtable_walk_stop+0x14c/0x370 [ 446.248005] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 446.268386] ? rhashtable_walk_stop+0x14c/0x370 [ 446.273070] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.278620] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 446.283817] __tipc_nl_compat_dumpit.isra.0+0x320/0x950 [ 446.289176] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 446.294438] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.299978] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.304984] ? skb_put+0x183/0x1e0 [ 446.308519] tipc_nl_compat_dumpit+0x24c/0x510 [ 446.313090] tipc_nl_compat_recv+0x5a6/0xaf0 [ 446.317487] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 446.322056] ? __lock_is_held+0xb6/0x140 [ 446.326106] ? tipc_dump_start+0x90/0x90 [ 446.330155] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 446.335678] ? genl_rcv_msg+0x13e/0x170 [ 446.339651] genl_family_rcv_msg+0x6db/0xd30 [ 446.344061] ? genl_unregister_family+0x790/0x790 [ 446.348893] ? __local_bh_enable_ip+0x15a/0x270 [ 446.353554] ? __dev_queue_xmit+0x892/0x2fe0 [ 446.357962] genl_rcv_msg+0xca/0x170 [ 446.361670] netlink_rcv_skb+0x17d/0x460 [ 446.365718] ? genl_family_rcv_msg+0xd30/0xd30 [ 446.370286] ? netlink_ack+0xb30/0xb30 [ 446.374169] genl_rcv+0x29/0x40 [ 446.377433] netlink_unicast+0x537/0x720 [ 446.381484] ? netlink_attachskb+0x770/0x770 [ 446.385886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.391420] netlink_sendmsg+0x8ae/0xd70 [ 446.395472] ? netlink_unicast+0x720/0x720 [ 446.399699] ? selinux_socket_sendmsg+0x36/0x40 [ 446.404356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.409879] ? security_socket_sendmsg+0x8d/0xc0 [ 446.414617] ? netlink_unicast+0x720/0x720 [ 446.418839] sock_sendmsg+0xd7/0x130 [ 446.422537] ___sys_sendmsg+0x803/0x920 [ 446.426498] ? copy_msghdr_from_user+0x430/0x430 [ 446.431243] ? lock_downgrade+0x810/0x810 [ 446.435379] ? kasan_check_read+0x11/0x20 [ 446.439523] ? __fget+0x367/0x540 [ 446.442975] ? iterate_fd+0x360/0x360 [ 446.446768] ? __fget_light+0x1a9/0x230 [ 446.450732] ? __fdget+0x1b/0x20 [ 446.454083] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.459608] __sys_sendmsg+0x105/0x1d0 [ 446.463483] ? __ia32_sys_shutdown+0x80/0x80 [ 446.467886] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 446.472629] ? do_syscall_64+0x26/0x620 [ 446.476590] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.481939] ? do_syscall_64+0x26/0x620 [ 446.485901] __x64_sys_sendmsg+0x78/0xb0 [ 446.489953] do_syscall_64+0xfd/0x620 [ 446.493742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.498915] RIP: 0033:0x459a09 [ 446.502094] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:03:11 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b60, 0x0) [ 446.520979] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.528675] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 446.535932] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 446.543190] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 446.550452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 446.557706] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:11 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x6) 06:03:11 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x5}]) 06:03:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x6, 0x7, 0x9, 'queue0\x00', 0x100}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01090000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={r5, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}, [0x6, 0x7f, 0x9, 0xa428, 0x3e50, 0x400, 0x10000, 0x4, 0xea0e, 0x579, 0x40, 0x100000000, 0x1, 0x3, 0xb3e3]}, &(0x7f0000000280)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r6, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4aba}]}, &(0x7f0000000340)=0x10) r7 = gettid() syz_open_procfs(r7, &(0x7f0000000140)='loginuid\x00') 06:03:12 executing program 4 (fault-call:4 fault-nth:11): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 446.800525] FAULT_INJECTION: forcing a failure. [ 446.800525] name failslab, interval 1, probability 0, space 0, times 0 [ 446.812239] CPU: 1 PID: 22127 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 446.819184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.828647] Call Trace: [ 446.831247] dump_stack+0x172/0x1f0 [ 446.834906] should_fail.cold+0xa/0x1b [ 446.838813] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 446.843916] ? lock_downgrade+0x810/0x810 [ 446.848064] __should_failslab+0x121/0x190 [ 446.852297] should_failslab+0x9/0x14 [ 446.856092] kmem_cache_alloc_node_trace+0x274/0x720 [ 446.861188] ? __alloc_skb+0xd5/0x5f0 [ 446.864987] __kmalloc_node_track_caller+0x3d/0x80 [ 446.869910] __kmalloc_reserve.isra.0+0x40/0xf0 [ 446.874571] __alloc_skb+0x10b/0x5f0 [ 446.878291] ? skb_scrub_packet+0x490/0x490 [ 446.882604] ? memset+0x32/0x40 [ 446.885877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.891416] tipc_nl_compat_sk_dump+0x46f/0x950 [ 446.896106] ? rhashtable_walk_stop+0x14c/0x370 [ 446.900772] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 446.906306] ? rhashtable_walk_stop+0x14c/0x370 [ 446.910967] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.916497] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 446.921690] __tipc_nl_compat_dumpit.isra.0+0x320/0x950 [ 446.927048] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 446.932315] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.937864] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 446.942867] ? skb_put+0x183/0x1e0 [ 446.946402] tipc_nl_compat_dumpit+0x24c/0x510 [ 446.950974] tipc_nl_compat_recv+0x5a6/0xaf0 [ 446.955374] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 446.959946] ? __lock_is_held+0xb6/0x140 [ 446.963994] ? tipc_dump_start+0x90/0x90 [ 446.968040] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 446.973562] ? genl_rcv_msg+0x13e/0x170 [ 446.977538] genl_family_rcv_msg+0x6db/0xd30 [ 446.981949] ? genl_unregister_family+0x790/0x790 [ 446.986784] ? __local_bh_enable_ip+0x15a/0x270 [ 446.991447] ? __dev_queue_xmit+0x892/0x2fe0 [ 446.995855] genl_rcv_msg+0xca/0x170 [ 446.999566] netlink_rcv_skb+0x17d/0x460 [ 447.003624] ? genl_family_rcv_msg+0xd30/0xd30 [ 447.008195] ? netlink_ack+0xb30/0xb30 [ 447.012080] genl_rcv+0x29/0x40 [ 447.015347] netlink_unicast+0x537/0x720 [ 447.019398] ? netlink_attachskb+0x770/0x770 [ 447.023798] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.029326] netlink_sendmsg+0x8ae/0xd70 [ 447.033387] ? netlink_unicast+0x720/0x720 [ 447.037633] ? selinux_socket_sendmsg+0x36/0x40 [ 447.042296] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.047829] ? security_socket_sendmsg+0x8d/0xc0 [ 447.052580] ? netlink_unicast+0x720/0x720 [ 447.056815] sock_sendmsg+0xd7/0x130 [ 447.060524] ___sys_sendmsg+0x803/0x920 [ 447.064489] ? copy_msghdr_from_user+0x430/0x430 [ 447.069235] ? lock_downgrade+0x810/0x810 [ 447.073372] ? kasan_check_read+0x11/0x20 [ 447.077514] ? __fget+0x367/0x540 [ 447.080968] ? iterate_fd+0x360/0x360 [ 447.084760] ? __fget_light+0x1a9/0x230 [ 447.088726] ? __fdget+0x1b/0x20 [ 447.092080] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.097608] __sys_sendmsg+0x105/0x1d0 [ 447.101487] ? __ia32_sys_shutdown+0x80/0x80 [ 447.105893] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.110638] ? do_syscall_64+0x26/0x620 [ 447.114598] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.119949] ? do_syscall_64+0x26/0x620 [ 447.123914] __x64_sys_sendmsg+0x78/0xb0 [ 447.127964] do_syscall_64+0xfd/0x620 [ 447.131756] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.136929] RIP: 0033:0x459a09 [ 447.140107] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.159002] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.166698] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 447.173952] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 447.181206] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.188469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 06:03:12 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x6}]) [ 447.195725] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:12 executing program 4 (fault-call:4 fault-nth:12): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) [ 447.305275] FAULT_INJECTION: forcing a failure. [ 447.305275] name failslab, interval 1, probability 0, space 0, times 0 [ 447.323845] CPU: 0 PID: 22138 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 447.330794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.340145] Call Trace: [ 447.342727] dump_stack+0x172/0x1f0 [ 447.346349] should_fail.cold+0xa/0x1b [ 447.350233] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 447.355329] ? lock_downgrade+0x810/0x810 [ 447.359475] __should_failslab+0x121/0x190 [ 447.363700] should_failslab+0x9/0x14 [ 447.367486] kmem_cache_alloc_node+0x26c/0x710 [ 447.372057] ? __lock_is_held+0xb6/0x140 [ 447.376106] ? should_fail+0x14d/0x85c [ 447.379985] __alloc_skb+0xd5/0x5f0 [ 447.383600] ? skb_scrub_packet+0x490/0x490 [ 447.387917] __tipc_nl_compat_dumpit.isra.0+0xf2/0x950 [ 447.393181] ? kasan_unpoison_shadow+0x35/0x50 [ 447.397751] ? kasan_kmalloc+0xce/0xf0 [ 447.401628] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 447.406891] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.412416] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.417426] ? __nla_put+0x37/0x40 [ 447.420954] ? nla_put+0x116/0x150 [ 447.424482] tipc_nl_compat_sk_dump+0x6c2/0x950 [ 447.429146] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 447.434670] ? rhashtable_walk_stop+0x14c/0x370 [ 447.439330] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.444850] ? tipc_nl_sk_dump+0x30/0x30 [ 447.448985] ? tipc_tlv_sprintf+0x300/0x300 [ 447.453302] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 447.458504] __tipc_nl_compat_dumpit.isra.0+0x320/0x950 [ 447.463862] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 447.469128] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.474671] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 447.479683] ? skb_put+0x183/0x1e0 [ 447.483215] tipc_nl_compat_dumpit+0x24c/0x510 [ 447.487786] tipc_nl_compat_recv+0x5a6/0xaf0 [ 447.492184] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 447.496753] ? __lock_is_held+0xb6/0x140 [ 447.500802] ? tipc_dump_start+0x90/0x90 [ 447.504851] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 447.510372] ? genl_rcv_msg+0x13e/0x170 [ 447.514345] genl_family_rcv_msg+0x6db/0xd30 [ 447.518744] ? genl_unregister_family+0x790/0x790 [ 447.523579] ? __local_bh_enable_ip+0x15a/0x270 [ 447.528236] ? __dev_queue_xmit+0x892/0x2fe0 [ 447.532641] genl_rcv_msg+0xca/0x170 [ 447.536342] netlink_rcv_skb+0x17d/0x460 [ 447.540391] ? genl_family_rcv_msg+0xd30/0xd30 [ 447.545056] ? netlink_ack+0xb30/0xb30 [ 447.548941] genl_rcv+0x29/0x40 [ 447.552205] netlink_unicast+0x537/0x720 [ 447.556271] ? netlink_attachskb+0x770/0x770 [ 447.560670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.566194] netlink_sendmsg+0x8ae/0xd70 [ 447.570248] ? netlink_unicast+0x720/0x720 [ 447.574479] ? selinux_socket_sendmsg+0x36/0x40 [ 447.579134] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.584657] ? security_socket_sendmsg+0x8d/0xc0 [ 447.589398] ? netlink_unicast+0x720/0x720 [ 447.593617] sock_sendmsg+0xd7/0x130 [ 447.597840] ___sys_sendmsg+0x803/0x920 [ 447.601802] ? copy_msghdr_from_user+0x430/0x430 [ 447.606548] ? lock_downgrade+0x810/0x810 [ 447.610685] ? kasan_check_read+0x11/0x20 [ 447.614825] ? __fget+0x367/0x540 [ 447.618273] ? iterate_fd+0x360/0x360 [ 447.622066] ? __fget_light+0x1a9/0x230 [ 447.626026] ? __fdget+0x1b/0x20 [ 447.629383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 447.634913] __sys_sendmsg+0x105/0x1d0 [ 447.638785] ? __ia32_sys_shutdown+0x80/0x80 [ 447.643192] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.647934] ? do_syscall_64+0x26/0x620 [ 447.651893] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.657243] ? do_syscall_64+0x26/0x620 [ 447.661209] __x64_sys_sendmsg+0x78/0xb0 [ 447.665261] do_syscall_64+0xfd/0x620 [ 447.669062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.674238] RIP: 0033:0x459a09 [ 447.677421] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.696307] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:03:13 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x7) [ 447.704001] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 447.711261] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 447.718515] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 447.725769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 447.733022] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:13 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x2) 06:03:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x7}]) 06:03:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@random="705f0530c893"]}) 06:03:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 06:03:13 executing program 4 (fault-call:4 fault-nth:13): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xdd, "f2c60690eb11d90e5940ee78c8dd750c849bca00cad63df7382c922292e7c68687a8290f2949829be6b3e0aa32b65150101467cfd09a9524b5bd4b5bbbde250b8e2b0da6f3b32c350e4a71219559aa03763fca8855b10f9231788b86a5e70f2976df30f4301b43242f2daa1e008893f97ccb1b3c75ff5679cfeb4e54176515cf918dfccc9d056277eee8a31d51182cf607dc85237f9bd14b1b380abb3205704062f2075c880c7b0b1d5e12f2a44d56f109ed9834bf2bb356f0b642186d4c1eb9ff3fe637f19c9598082263d30a013fad1ed99e96d62b3c9cd8444fef19"}, &(0x7f0000000140)=0xe5) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000180)={r2, 0x80, 0x5, 0x3, 0x40, 0x4, 0x5, 0x3, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}}, 0xc89, 0x4, 0x0, 0x9, 0xffffffffffffff00}}, &(0x7f0000000240)=0xb0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_ivalue}) [ 447.977101] FAULT_INJECTION: forcing a failure. [ 447.977101] name failslab, interval 1, probability 0, space 0, times 0 [ 448.003459] CPU: 1 PID: 22165 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 448.010420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.019817] Call Trace: [ 448.022416] dump_stack+0x172/0x1f0 06:03:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x8}]) [ 448.026057] should_fail.cold+0xa/0x1b [ 448.029965] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 448.035077] ? lock_downgrade+0x810/0x810 [ 448.039244] __should_failslab+0x121/0x190 [ 448.043489] should_failslab+0x9/0x14 [ 448.043506] kmem_cache_alloc_node_trace+0x274/0x720 [ 448.043521] ? __alloc_skb+0xd5/0x5f0 [ 448.043543] __kmalloc_node_track_caller+0x3d/0x80 [ 448.043558] __kmalloc_reserve.isra.0+0x40/0xf0 [ 448.052459] __alloc_skb+0x10b/0x5f0 [ 448.069515] ? skb_scrub_packet+0x490/0x490 [ 448.073851] __tipc_nl_compat_dumpit.isra.0+0xf2/0x950 [ 448.073870] ? kasan_unpoison_shadow+0x35/0x50 [ 448.073885] ? kasan_kmalloc+0xce/0xf0 [ 448.073906] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 448.073924] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.092896] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.092926] ? __nla_put+0x37/0x40 [ 448.106990] ? nla_put+0x116/0x150 [ 448.110547] tipc_nl_compat_sk_dump+0x6c2/0x950 [ 448.115234] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 448.120774] ? rhashtable_walk_stop+0x14c/0x370 [ 448.125436] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.130959] ? tipc_nl_sk_dump+0x30/0x30 [ 448.135010] ? tipc_tlv_sprintf+0x300/0x300 [ 448.139338] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 448.144539] __tipc_nl_compat_dumpit.isra.0+0x320/0x950 [ 448.149896] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 448.155160] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.160706] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.165713] ? skb_put+0x183/0x1e0 [ 448.169259] tipc_nl_compat_dumpit+0x24c/0x510 [ 448.173833] tipc_nl_compat_recv+0x5a6/0xaf0 [ 448.178233] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 448.182806] ? __lock_is_held+0xb6/0x140 [ 448.186866] ? tipc_dump_start+0x90/0x90 [ 448.190914] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 448.196436] ? genl_rcv_msg+0x13e/0x170 [ 448.200411] genl_family_rcv_msg+0x6db/0xd30 [ 448.204811] ? genl_unregister_family+0x790/0x790 [ 448.209651] ? __local_bh_enable_ip+0x15a/0x270 [ 448.214314] ? __dev_queue_xmit+0x892/0x2fe0 [ 448.218723] genl_rcv_msg+0xca/0x170 [ 448.222425] netlink_rcv_skb+0x17d/0x460 [ 448.226474] ? genl_family_rcv_msg+0xd30/0xd30 [ 448.231046] ? netlink_ack+0xb30/0xb30 [ 448.234929] genl_rcv+0x29/0x40 [ 448.238198] netlink_unicast+0x537/0x720 [ 448.242247] ? netlink_attachskb+0x770/0x770 [ 448.246646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.252169] netlink_sendmsg+0x8ae/0xd70 [ 448.256225] ? netlink_unicast+0x720/0x720 [ 448.260453] ? selinux_socket_sendmsg+0x36/0x40 [ 448.265107] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.270630] ? security_socket_sendmsg+0x8d/0xc0 [ 448.275371] ? netlink_unicast+0x720/0x720 [ 448.279594] sock_sendmsg+0xd7/0x130 [ 448.283298] ___sys_sendmsg+0x803/0x920 [ 448.287261] ? copy_msghdr_from_user+0x430/0x430 [ 448.292007] ? lock_downgrade+0x810/0x810 [ 448.296144] ? kasan_check_read+0x11/0x20 [ 448.300283] ? __fget+0x367/0x540 [ 448.303728] ? iterate_fd+0x360/0x360 [ 448.307521] ? __fget_light+0x1a9/0x230 [ 448.311481] ? __fdget+0x1b/0x20 [ 448.314832] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.320361] __sys_sendmsg+0x105/0x1d0 [ 448.324246] ? __ia32_sys_shutdown+0x80/0x80 [ 448.328653] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.333397] ? do_syscall_64+0x26/0x620 [ 448.337362] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.342715] ? do_syscall_64+0x26/0x620 [ 448.346683] __x64_sys_sendmsg+0x78/0xb0 [ 448.350736] do_syscall_64+0xfd/0x620 [ 448.354537] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.359715] RIP: 0033:0x459a09 06:03:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80086601, 0x0) [ 448.362895] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.381788] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.389484] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 448.396739] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 448.403993] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 448.411247] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 448.418502] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:13 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x60200, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1_to_hsr\x00', @broadcast}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$caif(r0, &(0x7f00000000c0)=@util={0x25, "d3bd0cc46349165b7862891a5517dc42"}, 0x18) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xa}]) 06:03:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80087601, 0x0) 06:03:13 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xa) 06:03:13 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x3) 06:03:13 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000040)="0248d74b554535f8f68d328869a10769d350a25b2cf3b10df885f9ca9834a030"}) 06:03:13 executing program 4 (fault-call:4 fault-nth:14): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:13 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xb}]) 06:03:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) [ 448.757215] audit: type=1400 audit(1569045794.010:101): avc: denied { create } for pid=22202 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 06:03:14 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40020fffffd, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000040)={0x1, "e3db3cb85c5a69688add93f3bb83d8d5a5e231757f54b0f2eb2d5ddade2ef7cc", 0x7050054b63f21ce7, 0x1}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 448.812072] audit: type=1400 audit(1569045794.040:102): avc: denied { ioctl } for pid=22202 comm="syz-executor.3" path="socket:[80479]" dev="sockfs" ino=80479 ioctlcmd=0x8923 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 448.858347] FAULT_INJECTION: forcing a failure. [ 448.858347] name failslab, interval 1, probability 0, space 0, times 0 [ 448.886676] CPU: 1 PID: 22204 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 448.893628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.902974] Call Trace: [ 448.905557] dump_stack+0x172/0x1f0 [ 448.909178] should_fail.cold+0xa/0x1b [ 448.913057] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 448.918149] ? lock_downgrade+0x810/0x810 [ 448.922295] __should_failslab+0x121/0x190 [ 448.926522] should_failslab+0x9/0x14 [ 448.930312] kmem_cache_alloc_trace+0x2cc/0x760 [ 448.934973] ? kasan_check_read+0x11/0x20 [ 448.939116] __tipc_dump_start+0x24b/0x3c0 [ 448.943344] __tipc_nl_compat_dumpit.isra.0+0x1a0/0x950 [ 448.948697] ? kasan_unpoison_shadow+0x35/0x50 [ 448.953265] ? kasan_kmalloc+0xce/0xf0 [ 448.957142] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 448.962407] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 448.967945] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 448.972954] ? __nla_put+0x37/0x40 [ 448.976481] ? nla_put+0x116/0x150 [ 448.980009] tipc_nl_compat_sk_dump+0x6c2/0x950 [ 448.984672] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 448.990196] ? rhashtable_walk_stop+0x14c/0x370 [ 448.994855] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.000377] ? tipc_nl_sk_dump+0x30/0x30 [ 449.004422] ? tipc_tlv_sprintf+0x300/0x300 [ 449.008733] ? lock_downgrade+0x810/0x810 [ 449.012872] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 449.018094] __tipc_nl_compat_dumpit.isra.0+0x320/0x950 [ 449.023464] ? __tipc_add_link_prop.isra.0+0x210/0x210 [ 449.028735] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.034277] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 449.039295] ? skb_put+0x183/0x1e0 [ 449.042831] tipc_nl_compat_dumpit+0x24c/0x510 [ 449.047404] tipc_nl_compat_recv+0x5a6/0xaf0 [ 449.051803] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 449.056383] ? __lock_is_held+0xb6/0x140 [ 449.060432] ? tipc_dump_start+0x90/0x90 [ 449.064483] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 449.070006] ? genl_rcv_msg+0x13e/0x170 [ 449.073980] genl_family_rcv_msg+0x6db/0xd30 [ 449.078379] ? genl_unregister_family+0x790/0x790 [ 449.083215] ? __local_bh_enable_ip+0x15a/0x270 [ 449.087875] ? __dev_queue_xmit+0x892/0x2fe0 [ 449.092281] genl_rcv_msg+0xca/0x170 [ 449.095984] netlink_rcv_skb+0x17d/0x460 [ 449.100030] ? genl_family_rcv_msg+0xd30/0xd30 [ 449.104599] ? netlink_ack+0xb30/0xb30 [ 449.108484] genl_rcv+0x29/0x40 [ 449.111758] netlink_unicast+0x537/0x720 [ 449.115810] ? netlink_attachskb+0x770/0x770 [ 449.120215] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.125740] netlink_sendmsg+0x8ae/0xd70 [ 449.129791] ? netlink_unicast+0x720/0x720 [ 449.134021] ? selinux_socket_sendmsg+0x36/0x40 [ 449.138677] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.144200] ? security_socket_sendmsg+0x8d/0xc0 [ 449.148940] ? netlink_unicast+0x720/0x720 [ 449.153162] sock_sendmsg+0xd7/0x130 [ 449.156862] ___sys_sendmsg+0x803/0x920 [ 449.160824] ? copy_msghdr_from_user+0x430/0x430 [ 449.165568] ? lock_downgrade+0x810/0x810 [ 449.169705] ? kasan_check_read+0x11/0x20 [ 449.173846] ? __fget+0x367/0x540 [ 449.177289] ? iterate_fd+0x360/0x360 [ 449.181085] ? __fget_light+0x1a9/0x230 [ 449.185048] ? __fdget+0x1b/0x20 [ 449.188400] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.193925] __sys_sendmsg+0x105/0x1d0 [ 449.197799] ? __ia32_sys_shutdown+0x80/0x80 [ 449.202203] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.206944] ? do_syscall_64+0x26/0x620 [ 449.210907] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.216254] ? do_syscall_64+0x26/0x620 [ 449.220217] __x64_sys_sendmsg+0x78/0xb0 [ 449.224273] do_syscall_64+0xfd/0x620 [ 449.228062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.233241] RIP: 0033:0x459a09 [ 449.236420] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.255304] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:03:14 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xd}]) [ 449.263001] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 449.270255] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 449.277507] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.284762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 449.292017] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="69878579b4df941bfae54f8c280e94e194b049277ee80ecf90f772f7fe12c21889fb3a69102b86e58b31d415d5dec5d92d50d802f4566069489d3d2214551716a09491e64f6591a72c0e535f62461c8b171647766af6337f52ef6dedcd872b9ddd289e72c091e998b0a6cdcbb41936f3a552f858eba26c651126427925767bdaf069ed817e70fc9254230d027eeba568c8841cadf00b265e6738b222ee61593b27976b62849e0b43a2ebf9b817b1476038db77e56d56", 0xb6, 0xfffffffffffffffe}], 0x2, &(0x7f00000001c0)={[{@discard='discard'}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@grpquota='grpquota'}, {@grpid='grpid'}, {@logbufs={'logbufs'}}, {@pqnoenforce='pqnoenforce'}], [{@permit_directio='permit_directio'}, {@appraise='appraise'}]}) 06:03:14 executing program 4 (fault-call:4 fault-nth:15): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) [ 449.441710] FAULT_INJECTION: forcing a failure. [ 449.441710] name failslab, interval 1, probability 0, space 0, times 0 [ 449.457121] CPU: 1 PID: 22231 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 449.464072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.464078] Call Trace: [ 449.464097] dump_stack+0x172/0x1f0 [ 449.464119] should_fail.cold+0xa/0x1b [ 449.464136] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 449.464150] ? save_stack+0xa9/0xd0 [ 449.464164] ? save_stack+0x45/0xd0 [ 449.476281] ? __kasan_slab_free+0x102/0x150 [ 449.476304] ? kasan_slab_free+0xe/0x10 [ 449.489060] XFS (loop3): unknown mount option [permit_directio]. [ 449.492478] ? kmem_cache_free+0x86/0x260 [ 449.492499] __should_failslab+0x121/0x190 [ 449.492520] should_failslab+0x9/0x14 [ 449.522813] kmem_cache_alloc_node_trace+0x5a/0x720 [ 449.527819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.533175] ? debug_check_no_obj_freed+0x200/0x464 [ 449.538195] __kmalloc_node_track_caller+0x3d/0x80 [ 449.543117] __kmalloc_reserve.isra.0+0x40/0xf0 [ 449.547775] pskb_expand_head+0x154/0xe20 [ 449.551914] ? __lock_is_held+0xb6/0x140 [ 449.555970] netlink_trim+0x215/0x260 [ 449.559761] netlink_unicast+0xbf/0x720 [ 449.563723] ? netlink_attachskb+0x770/0x770 [ 449.568117] ? kfree_skb+0xf5/0x390 [ 449.571746] tipc_nl_compat_recv+0x384/0xaf0 [ 449.576143] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 449.580709] ? __lock_is_held+0xb6/0x140 [ 449.584756] ? tipc_dump_start+0x90/0x90 [ 449.588803] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 449.594324] ? genl_rcv_msg+0x13e/0x170 [ 449.598307] genl_family_rcv_msg+0x6db/0xd30 [ 449.602707] ? genl_unregister_family+0x790/0x790 [ 449.607539] ? __local_bh_enable_ip+0x15a/0x270 [ 449.612199] ? __dev_queue_xmit+0x892/0x2fe0 [ 449.616606] genl_rcv_msg+0xca/0x170 [ 449.620311] netlink_rcv_skb+0x17d/0x460 [ 449.624359] ? genl_family_rcv_msg+0xd30/0xd30 [ 449.629026] ? netlink_ack+0xb30/0xb30 [ 449.632919] genl_rcv+0x29/0x40 [ 449.636187] netlink_unicast+0x537/0x720 [ 449.640238] ? netlink_attachskb+0x770/0x770 [ 449.644638] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.650164] netlink_sendmsg+0x8ae/0xd70 [ 449.654215] ? netlink_unicast+0x720/0x720 [ 449.658442] ? selinux_socket_sendmsg+0x36/0x40 [ 449.663098] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.668621] ? security_socket_sendmsg+0x8d/0xc0 [ 449.673360] ? netlink_unicast+0x720/0x720 [ 449.677584] sock_sendmsg+0xd7/0x130 [ 449.681299] ___sys_sendmsg+0x803/0x920 [ 449.685351] ? copy_msghdr_from_user+0x430/0x430 [ 449.690099] ? lock_downgrade+0x810/0x810 [ 449.694236] ? kasan_check_read+0x11/0x20 [ 449.698387] ? __fget+0x367/0x540 [ 449.701830] ? iterate_fd+0x360/0x360 [ 449.705623] ? __fget_light+0x1a9/0x230 [ 449.709585] ? __fdget+0x1b/0x20 [ 449.712957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 449.718502] __sys_sendmsg+0x105/0x1d0 [ 449.722377] ? __ia32_sys_shutdown+0x80/0x80 [ 449.726783] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.731532] ? do_syscall_64+0x26/0x620 [ 449.735503] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.740854] ? do_syscall_64+0x26/0x620 [ 449.744818] __x64_sys_sendmsg+0x78/0xb0 [ 449.748868] do_syscall_64+0xfd/0x620 [ 449.752658] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.757830] RIP: 0033:0x459a09 [ 449.761009] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.779904] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 06:03:15 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x5) [ 449.787603] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 449.794855] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 449.802112] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 449.809368] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 449.816635] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:15 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xe) 06:03:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xe}]) 06:03:15 executing program 4 (fault-call:4 fault-nth:16): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 449.881985] XFS (loop3): unknown mount option [permit_directio]. 06:03:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') io_setup(0x4, &(0x7f0000000080)=0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40001, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r4, 0x8038550a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_all\x00', 0x0, 0x0) io_submit(r2, 0x3, &(0x7f00000013c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0xc, 0x2, r3, &(0x7f0000000140)="5f7326a52a7eb5ff5a3a90ec4c166641cfd458c5dd90466ce1a0fb03da44968fc4a7b778096d679ccf1432bcb924a81719162986a8430d9da5c12bdf8bdb89f2074b958399ae78b8594e5a979bb0e386669b6f0af7c863665cb03b645187bd6f8971ad072ede1beeb8b5cc1b19fd5ea463ae3b53afde4089d6285aaadea30481f1fed2956a0122d242e5af5b2684222b3958fde3b12844f9d22058503cf309115a84dceb7fb68feb9783f1a0e41df2d2183f63a8aa", 0xb5, 0xa93, 0x0, 0x3, r4}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x6, 0x5, r5, &(0x7f0000000280)="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", 0x1000, 0x1, 0x0, 0x1c0a0a8c13fbed9, r1}, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x8, 0x101, r1, &(0x7f00000012c0)="d7e8d809d7e8f4ccce1088b748350ca2f3c6e1fbbbbdd1763bb4911d1249b7e5c44d8c8f4fd5f186f2ab04075e68e277e754cffe083d49a9b124b85616824ee353e039b154b609c49c126dadfea63ac60a2e49850fb6ee5ce66d8a1fe5fd3c951f2dd31ef5674472b6d3c5309b592fc9269f73dfaca3b3c9bc3efe7874810c9d7b7d2b920be86dda6084fc6d020969385f199e42d954d54d325ff96fa85323df88490c988caf73da477a", 0xaa, 0x401, 0x0, 0x1}]) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 450.041515] FAULT_INJECTION: forcing a failure. [ 450.041515] name failslab, interval 1, probability 0, space 0, times 0 [ 450.071561] CPU: 0 PID: 22257 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 450.078537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.087891] Call Trace: [ 450.090481] dump_stack+0x172/0x1f0 [ 450.094102] should_fail.cold+0xa/0x1b [ 450.097986] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 450.103080] ? find_held_lock+0x35/0x130 [ 450.107141] ? netlink_deliver_tap+0x146/0xc20 [ 450.111722] __should_failslab+0x121/0x190 [ 450.115941] should_failslab+0x9/0x14 [ 450.119725] kmem_cache_alloc+0x47/0x700 [ 450.123780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.129316] ? check_preemption_disabled+0x48/0x290 [ 450.134315] ? lock_acquire+0x16f/0x3f0 [ 450.138276] skb_clone+0x156/0x3e0 [ 450.141815] netlink_deliver_tap+0x97b/0xc20 [ 450.146228] __netlink_sendskb+0x68/0xc0 [ 450.150285] netlink_unicast+0x616/0x720 [ 450.154334] ? netlink_attachskb+0x770/0x770 [ 450.158725] ? kfree_skb+0xf5/0x390 [ 450.162343] tipc_nl_compat_recv+0x384/0xaf0 [ 450.166752] ? tipc_nl_compat_doit+0x5e0/0x5e0 [ 450.171342] ? __lock_is_held+0xb6/0x140 [ 450.175410] ? tipc_dump_start+0x90/0x90 [ 450.175473] ? __tipc_nl_compat_dumpit.isra.0+0x950/0x950 [ 450.175490] ? genl_rcv_msg+0x13e/0x170 [ 450.185209] genl_family_rcv_msg+0x6db/0xd30 [ 450.185232] ? genl_unregister_family+0x790/0x790 [ 450.185252] ? __local_bh_enable_ip+0x15a/0x270 [ 450.185272] ? __dev_queue_xmit+0x892/0x2fe0 [ 450.185302] genl_rcv_msg+0xca/0x170 [ 450.193655] netlink_rcv_skb+0x17d/0x460 [ 450.193679] ? genl_family_rcv_msg+0xd30/0xd30 [ 450.193696] ? netlink_ack+0xb30/0xb30 [ 450.193725] genl_rcv+0x29/0x40 [ 450.193736] netlink_unicast+0x537/0x720 [ 450.193754] ? netlink_attachskb+0x770/0x770 [ 450.219937] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.219957] netlink_sendmsg+0x8ae/0xd70 [ 450.219979] ? netlink_unicast+0x720/0x720 [ 450.219998] ? selinux_socket_sendmsg+0x36/0x40 [ 450.220015] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.259543] ? security_socket_sendmsg+0x8d/0xc0 [ 450.264347] ? netlink_unicast+0x720/0x720 [ 450.268583] sock_sendmsg+0xd7/0x130 [ 450.272292] ___sys_sendmsg+0x803/0x920 [ 450.276270] ? copy_msghdr_from_user+0x430/0x430 [ 450.281115] ? lock_downgrade+0x810/0x810 [ 450.285276] ? kasan_check_read+0x11/0x20 [ 450.289424] ? __fget+0x367/0x540 [ 450.292933] ? iterate_fd+0x360/0x360 [ 450.296735] ? __fget_light+0x1a9/0x230 [ 450.300693] ? __fdget+0x1b/0x20 [ 450.304048] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.309571] __sys_sendmsg+0x105/0x1d0 [ 450.313447] ? __ia32_sys_shutdown+0x80/0x80 [ 450.317853] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.322602] ? do_syscall_64+0x26/0x620 [ 450.326581] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.331930] ? do_syscall_64+0x26/0x620 [ 450.335897] __x64_sys_sendmsg+0x78/0xb0 [ 450.339953] do_syscall_64+0xfd/0x620 [ 450.343754] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.348924] RIP: 0033:0x459a09 [ 450.352100] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.370984] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.378674] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 450.385934] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 06:03:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 06:03:15 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xf}]) [ 450.393197] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 450.400455] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 450.407715] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:15 executing program 4 (fault-call:4 fault-nth:17): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 450.525527] FAULT_INJECTION: forcing a failure. [ 450.525527] name failslab, interval 1, probability 0, space 0, times 0 [ 450.543412] CPU: 1 PID: 22274 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 450.550365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.559718] Call Trace: [ 450.562302] dump_stack+0x172/0x1f0 [ 450.565929] should_fail.cold+0xa/0x1b [ 450.569833] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 450.574926] ? lock_downgrade+0x810/0x810 [ 450.579069] __should_failslab+0x121/0x190 [ 450.583295] should_failslab+0x9/0x14 [ 450.587082] kmem_cache_alloc_node+0x26c/0x710 [ 450.591656] ? genl_rcv_msg+0x129/0x170 [ 450.595621] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 450.601152] __alloc_skb+0xd5/0x5f0 [ 450.604769] ? skb_scrub_packet+0x490/0x490 [ 450.609081] ? kasan_check_write+0x14/0x20 [ 450.613304] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 450.618137] netlink_ack+0x25c/0xb30 [ 450.621841] ? netlink_sendmsg+0xd70/0xd70 [ 450.626066] ? mutex_unlock+0xd/0x10 [ 450.629777] ? genl_rcv_msg+0x106/0x170 [ 450.633738] netlink_rcv_skb+0x382/0x460 [ 450.637787] ? genl_family_rcv_msg+0xd30/0xd30 [ 450.642358] ? netlink_ack+0xb30/0xb30 [ 450.646243] genl_rcv+0x29/0x40 [ 450.649508] netlink_unicast+0x537/0x720 [ 450.653558] ? netlink_attachskb+0x770/0x770 [ 450.657957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.663494] netlink_sendmsg+0x8ae/0xd70 [ 450.667549] ? netlink_unicast+0x720/0x720 [ 450.671777] ? selinux_socket_sendmsg+0x36/0x40 [ 450.676440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.681965] ? security_socket_sendmsg+0x8d/0xc0 [ 450.686705] ? netlink_unicast+0x720/0x720 [ 450.690927] sock_sendmsg+0xd7/0x130 [ 450.694627] ___sys_sendmsg+0x803/0x920 [ 450.698595] ? copy_msghdr_from_user+0x430/0x430 [ 450.703341] ? lock_downgrade+0x810/0x810 [ 450.707482] ? kasan_check_read+0x11/0x20 [ 450.711619] ? __fget+0x367/0x540 [ 450.715067] ? iterate_fd+0x360/0x360 [ 450.718861] ? __fget_light+0x1a9/0x230 [ 450.722822] ? __fdget+0x1b/0x20 [ 450.726173] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.731698] __sys_sendmsg+0x105/0x1d0 [ 450.735576] ? __ia32_sys_shutdown+0x80/0x80 [ 450.739980] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 450.744720] ? do_syscall_64+0x26/0x620 [ 450.748684] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.754033] ? do_syscall_64+0x26/0x620 [ 450.757998] __x64_sys_sendmsg+0x78/0xb0 [ 450.762050] do_syscall_64+0xfd/0x620 [ 450.765842] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.771015] RIP: 0033:0x459a09 [ 450.774195] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.793083] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.800777] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 450.808035] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 450.815289] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 06:03:16 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x11) 06:03:16 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x7) [ 450.822544] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 450.829803] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:16 executing program 4 (fault-call:4 fault-nth:18): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x10}]) 06:03:16 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r1) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x2, 0x12, 0x7, 0x3}) 06:03:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 06:03:16 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xbff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [], @local}}, @in={0x2, 0x0, @remote}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x65, &(0x7f0000000000), 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@netrom, @remote, @remote, @remote, @remote, @default, @rose]}, &(0x7f0000000000)=0x48) ioctl$sock_ifreq(r1, 0x8921, &(0x7f0000000040)={'eql\x00\x00\x00\x01\x005\x00\x00\x00\x06\x00', @ifru_data=&(0x7f0000000100)="f5276af423458f2bd44734abccf9c3563aac75554445acbcc5c3595d55d11478"}) [ 451.017317] FAULT_INJECTION: forcing a failure. [ 451.017317] name failslab, interval 1, probability 0, space 0, times 0 [ 451.110675] CPU: 1 PID: 22288 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 451.117647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.127011] Call Trace: [ 451.129616] dump_stack+0x172/0x1f0 [ 451.133262] should_fail.cold+0xa/0x1b [ 451.137164] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 451.142274] ? lock_downgrade+0x810/0x810 [ 451.146439] __should_failslab+0x121/0x190 [ 451.150683] should_failslab+0x9/0x14 [ 451.154486] kmem_cache_alloc_node_trace+0x274/0x720 [ 451.159599] ? __alloc_skb+0xd5/0x5f0 [ 451.163418] __kmalloc_node_track_caller+0x3d/0x80 [ 451.168358] __kmalloc_reserve.isra.0+0x40/0xf0 [ 451.173041] __alloc_skb+0x10b/0x5f0 [ 451.176764] ? skb_scrub_packet+0x490/0x490 [ 451.181126] ? kasan_check_write+0x14/0x20 [ 451.185372] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 451.190233] netlink_ack+0x25c/0xb30 [ 451.193956] ? netlink_sendmsg+0xd70/0xd70 [ 451.198196] ? mutex_unlock+0xd/0x10 [ 451.201910] ? genl_rcv_msg+0x106/0x170 [ 451.205892] netlink_rcv_skb+0x382/0x460 [ 451.209961] ? genl_family_rcv_msg+0xd30/0xd30 [ 451.214549] ? netlink_ack+0xb30/0xb30 [ 451.218455] genl_rcv+0x29/0x40 [ 451.221740] netlink_unicast+0x537/0x720 [ 451.225811] ? netlink_attachskb+0x770/0x770 [ 451.230228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.235771] netlink_sendmsg+0x8ae/0xd70 [ 451.239844] ? netlink_unicast+0x720/0x720 [ 451.244083] ? selinux_socket_sendmsg+0x36/0x40 [ 451.248742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.254269] ? security_socket_sendmsg+0x8d/0xc0 [ 451.259019] ? netlink_unicast+0x720/0x720 [ 451.263243] sock_sendmsg+0xd7/0x130 [ 451.266944] ___sys_sendmsg+0x803/0x920 [ 451.270905] ? copy_msghdr_from_user+0x430/0x430 [ 451.275649] ? lock_downgrade+0x810/0x810 [ 451.279808] ? kasan_check_read+0x11/0x20 [ 451.283946] ? __fget+0x367/0x540 [ 451.287392] ? iterate_fd+0x360/0x360 [ 451.291184] ? __fget_light+0x1a9/0x230 [ 451.295144] ? __fdget+0x1b/0x20 [ 451.298497] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.304024] __sys_sendmsg+0x105/0x1d0 [ 451.307897] ? __ia32_sys_shutdown+0x80/0x80 [ 451.312303] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.317043] ? do_syscall_64+0x26/0x620 [ 451.321011] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.326359] ? do_syscall_64+0x26/0x620 [ 451.330326] __x64_sys_sendmsg+0x78/0xb0 [ 451.334375] do_syscall_64+0xfd/0x620 [ 451.338172] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.343347] RIP: 0033:0x459a09 06:03:16 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x11}]) [ 451.346526] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.365415] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.373111] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 [ 451.380365] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 451.387617] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 451.394871] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 451.402127] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:16 executing program 4 (fault-call:4 fault-nth:19): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) [ 451.532315] FAULT_INJECTION: forcing a failure. [ 451.532315] name failslab, interval 1, probability 0, space 0, times 0 [ 451.557325] CPU: 1 PID: 22314 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 451.564287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.573644] Call Trace: [ 451.576238] dump_stack+0x172/0x1f0 [ 451.579874] should_fail.cold+0xa/0x1b [ 451.583771] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 451.588880] ? lock_downgrade+0x810/0x810 [ 451.593042] __should_failslab+0x121/0x190 [ 451.597285] should_failslab+0x9/0x14 [ 451.601088] kmem_cache_alloc_node_trace+0x274/0x720 [ 451.606192] ? __alloc_skb+0xd5/0x5f0 [ 451.610006] __kmalloc_node_track_caller+0x3d/0x80 [ 451.614943] __kmalloc_reserve.isra.0+0x40/0xf0 [ 451.619620] __alloc_skb+0x10b/0x5f0 [ 451.623339] ? skb_scrub_packet+0x490/0x490 [ 451.627669] ? kasan_check_write+0x14/0x20 [ 451.631911] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 451.636762] netlink_ack+0x25c/0xb30 [ 451.640482] ? netlink_sendmsg+0xd70/0xd70 [ 451.644725] ? mutex_unlock+0xd/0x10 [ 451.648442] ? genl_rcv_msg+0x106/0x170 [ 451.652420] netlink_rcv_skb+0x382/0x460 [ 451.656486] ? genl_family_rcv_msg+0xd30/0xd30 [ 451.661074] ? netlink_ack+0xb30/0xb30 [ 451.664983] genl_rcv+0x29/0x40 [ 451.668265] netlink_unicast+0x537/0x720 [ 451.672332] ? netlink_attachskb+0x770/0x770 [ 451.676752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.682297] netlink_sendmsg+0x8ae/0xd70 [ 451.686367] ? netlink_unicast+0x720/0x720 [ 451.690611] ? selinux_socket_sendmsg+0x36/0x40 [ 451.695287] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.700829] ? security_socket_sendmsg+0x8d/0xc0 [ 451.705590] ? netlink_unicast+0x720/0x720 [ 451.709834] sock_sendmsg+0xd7/0x130 [ 451.713571] ___sys_sendmsg+0x803/0x920 [ 451.717540] ? copy_msghdr_from_user+0x430/0x430 [ 451.722289] ? lock_downgrade+0x810/0x810 [ 451.726433] ? kasan_check_read+0x11/0x20 [ 451.730574] ? __fget+0x367/0x540 [ 451.734020] ? iterate_fd+0x360/0x360 [ 451.737814] ? __fget_light+0x1a9/0x230 [ 451.741774] ? __fdget+0x1b/0x20 [ 451.745144] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.750672] __sys_sendmsg+0x105/0x1d0 [ 451.754548] ? __ia32_sys_shutdown+0x80/0x80 [ 451.758953] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 451.763704] ? do_syscall_64+0x26/0x620 [ 451.767673] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.773024] ? do_syscall_64+0x26/0x620 [ 451.776992] __x64_sys_sendmsg+0x78/0xb0 [ 451.781041] do_syscall_64+0xfd/0x620 [ 451.784830] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.790006] RIP: 0033:0x459a09 [ 451.793185] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.812082] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.819780] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 06:03:17 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x8) 06:03:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x203) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x0, r2}) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000040)) [ 451.827033] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 451.834291] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 451.841556] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 451.848810] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:17 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x14) 06:03:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x14d}]) 06:03:17 executing program 4 (fault-call:4 fault-nth:20): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x29a}]) 06:03:17 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) [ 452.061565] FAULT_INJECTION: forcing a failure. [ 452.061565] name failslab, interval 1, probability 0, space 0, times 0 [ 452.078244] CPU: 1 PID: 22338 Comm: syz-executor.4 Not tainted 4.19.74 #0 [ 452.085199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.094551] Call Trace: [ 452.094621] dump_stack+0x172/0x1f0 [ 452.094642] should_fail.cold+0xa/0x1b [ 452.104725] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 452.109830] ? find_held_lock+0x35/0x130 [ 452.109848] ? netlink_deliver_tap+0x146/0xc20 [ 452.109869] __should_failslab+0x121/0x190 [ 452.118483] should_failslab+0x9/0x14 [ 452.118498] kmem_cache_alloc+0x47/0x700 [ 452.118516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.118532] ? check_preemption_disabled+0x48/0x290 [ 452.118544] ? lock_acquire+0x16f/0x3f0 [ 452.118564] skb_clone+0x156/0x3e0 [ 452.118581] netlink_deliver_tap+0x97b/0xc20 [ 452.118605] __netlink_sendskb+0x68/0xc0 [ 452.130646] netlink_unicast+0x616/0x720 [ 452.130672] ? netlink_attachskb+0x770/0x770 [ 452.165590] netlink_ack+0x645/0xb30 [ 452.169319] ? netlink_sendmsg+0xd70/0xd70 [ 452.173568] ? mutex_unlock+0xd/0x10 [ 452.177296] ? genl_rcv_msg+0x106/0x170 [ 452.181279] netlink_rcv_skb+0x382/0x460 [ 452.185348] ? genl_family_rcv_msg+0xd30/0xd30 [ 452.189944] ? netlink_ack+0xb30/0xb30 [ 452.193852] genl_rcv+0x29/0x40 [ 452.197144] netlink_unicast+0x537/0x720 [ 452.201217] ? netlink_attachskb+0x770/0x770 [ 452.205641] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 06:03:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/159, 0x9f) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 452.211186] netlink_sendmsg+0x8ae/0xd70 [ 452.215260] ? netlink_unicast+0x720/0x720 [ 452.219507] ? selinux_socket_sendmsg+0x36/0x40 [ 452.224185] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.229733] ? security_socket_sendmsg+0x8d/0xc0 [ 452.234496] ? netlink_unicast+0x720/0x720 [ 452.238745] sock_sendmsg+0xd7/0x130 [ 452.242501] ___sys_sendmsg+0x803/0x920 [ 452.246489] ? copy_msghdr_from_user+0x430/0x430 [ 452.251257] ? lock_downgrade+0x810/0x810 [ 452.255421] ? kasan_check_read+0x11/0x20 06:03:17 executing program 3: syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x8200) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 452.259585] ? __fget+0x367/0x540 [ 452.263050] ? iterate_fd+0x360/0x360 [ 452.266866] ? __fget_light+0x1a9/0x230 [ 452.270847] ? __fdget+0x1b/0x20 [ 452.274220] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.279765] __sys_sendmsg+0x105/0x1d0 [ 452.283660] ? __ia32_sys_shutdown+0x80/0x80 [ 452.288079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.288095] ? do_syscall_64+0x26/0x620 [ 452.288111] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.288123] ? do_syscall_64+0x26/0x620 [ 452.288141] __x64_sys_sendmsg+0x78/0xb0 06:03:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{}, [@remote, @remote, @netrom, @netrom, @bcast, @netrom, @null, @netrom]}, &(0x7f00000000c0)=0x48, 0x800) fcntl$addseals(r1, 0x409, 0x8) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) [ 452.296853] do_syscall_64+0xfd/0x620 [ 452.296872] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.296886] RIP: 0033:0x459a09 [ 452.322385] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.341289] RSP: 002b:00007f1763f20c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.349005] RAX: ffffffffffffffda RBX: 00007f1763f20c90 RCX: 0000000000459a09 06:03:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) [ 452.356276] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000004 [ 452.363550] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 452.370824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1763f216d4 [ 452.378097] R13: 00000000004cec80 R14: 00000000004dcf80 R15: 0000000000000005 06:03:17 executing program 4 (fault-call:4 fault-nth:21): r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:17 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xa) 06:03:17 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x300}]) 06:03:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x2, 0x8000) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000ffe000/0x2000)=nil}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 06:03:18 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x24) 06:03:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x500}]) 06:03:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x2, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6, 0x0, 0x1, 0x0, 0x5, 0xfffffffffffffffc}}, 0xe8) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x14000) getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket(0x4, 0x800, 0x4) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 06:03:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x600}]) 06:03:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:18 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xe) 06:03:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x700}]) 06:03:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 06:03:18 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x30) 06:03:18 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000100)={0x1, 0x1, 0x7, 0xfffffffffffffffc, 0xd2, 0x6}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f00000000c0)=0x10, 0x4) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000080)=0x7) 06:03:18 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 06:03:18 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xa00}]) 06:03:18 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x3e02}) 06:03:19 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) 06:03:19 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x11) 06:03:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xb00}]) 06:03:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r4}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'yam0\x00', r4}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, [], 0x1e}, 0x200, 0x5, 0x6, 0x400, 0x80, 0x4000000, r6}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:19 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x7, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 454.494229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:03:19 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x60) 06:03:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5) 06:03:19 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xa, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xd00}]) 06:03:19 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xe, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 454.686256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:03:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6) 06:03:19 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xf, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xe00}]) 06:03:20 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x14) 06:03:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x100) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00000000c0)={0x0, 0x4}) clock_getres(0x1, &(0x7f0000000040)) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x84800, 0x0) ioctl(r2, 0x1000, &(0x7f0000000140)="fa6183f25215a5b3e1ab1a0c9cc0c41691b91021a4320a24527220e7cdfad43eb57391e21aa41df2229bff12e716689a8a16b520") ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:20 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x48, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 06:03:20 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xb4) 06:03:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xf00}]) 06:03:20 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="a17af8857d94c3018bb936b84590745cb404f4caf42fe88daa699d4e95a64637b8a79d66d0fdd7f2d62bddad46eb66764fdf0cc277ab1b8e09b4c94cb6dd04f77645dee53c734553c6e2187643ebd1e74551e8b1711efbeaab90e65f19f007fcfa523305c111596acbcfcddb0770906f2386c61ff982be2846aad362d17e5e55f276c528bf6a961308c8cf43", 0x8c, 0x3}, {&(0x7f0000000180)="4aef8dfadbde376534c9d89656b6625bd3f2ef180f465dd4f253c6cb9815f0e305ae55aa52daa3e71dc3210e87395742f157c4b996ab5fe7db5d95befdbef040ca3560068423e0ea0a504d1d979ebf4daf69c0132e9a34bf14b71e1b799646dba550aca0b69e5299dc8c8d9a9593f8d685e191af53915b311ee5bc44465c3a276eb2785dbd46d1ea460bd39b08553167e2a02da73c1e00addd43fb2a62ab0afe82e4058469e8fb2982621817d4a5ee7291ae5d94f636d94516fa7e2fa7ae03bc7d0b258f95286987b452", 0xca, 0x7282}, {&(0x7f0000000280)="1adb05", 0x3, 0x3f}, {&(0x7f00000002c0)="5c3c2497e606f7ab3ca027af9d1855764f1b61e5cc6fc5e62e81c0d5a32dd12c4e7219cf36b32c25e4532e684a3e4391c181dd7e0ccc2b8c4ecc48b24d28eae4794d23a890521f5bfb9737e96750827933307fa619b9c5c61b535649089fbe0198e42f67addbd8ef7fefa1beabfe4952cfabcf5fe247a32be2fb10c2c1cd483542c36902395d57f596ad8644b36de1d02b99138dba224fde6839b27b806e780b804314a2a6a701e5ff90d751e21cfe3d006c887f6178db0f987df483d54f05a59814bf8956c21ea000dffa3d4ac272990dfbbaa54a0c998824b218fdca6fd2688cefa9368586631fbccf0bd1", 0xec, 0x3}, {&(0x7f00000003c0)="1a4e5f21cc44c7287203af75dd2e1a286e6db82a9b1595847a242850dbe9342ffbc2c3b43e97a2", 0x27, 0x6a2}], 0x2000000, &(0x7f0000000480)='eql\x00\x00\x00\x01\x005\x00') 06:03:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8) 06:03:20 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x60, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 455.485856] ceph: device name is missing path (no : separator in /dev/loop3) 06:03:20 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x1100}]) 06:03:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9) [ 455.577528] ceph: device name is missing path (no : separator in /dev/loop3) 06:03:21 executing program 3: openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:21 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x68, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x157c}]) 06:03:21 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x24) 06:03:21 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xe0) 06:03:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xa) 06:03:21 executing program 3: ioctl$sock_ifreq(0xffffffffffffffff, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:21 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x1f40}]) 06:03:21 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 06:03:21 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x74, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:21 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x2000}]) 06:03:21 executing program 3: ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000040)={0x9, 0x6, 0x1, 0x44c7, 0xffff, 0x3}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xb) 06:03:21 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:22 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x30) 06:03:22 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xf0) 06:03:22 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8, 0x1, 'cbs\x00'}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) connect$can_bcm(r1, &(0x7f0000000040)={0x1d, r4}, 0x10) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x3f00}]) 06:03:22 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) 06:03:22 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x300, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xd) 06:03:22 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000080)={[], 0x3, 0x6, 0xfffffffffffffffd, 0x0, 0x401, 0x3000, 0x1b002, [], 0x5}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000280)=0x10000) ioctl$sock_ifreq(r1, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f00000002c0)=0x2, 0x4) 06:03:22 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x4000}]) 06:03:22 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x500, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:22 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x200008000089f4, &(0x7f0000000000)={'ip_vti0\x00', @ifru_names='hsr0\x00'}) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$KVM_SMI(r1, 0xaeb7) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r2, 0x65, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x9, 0xa4, &(0x7f0000000240)="192428e38c2408e898b64ebc44d1db212687371f02e96693c3410dafca10f18655b4339a0fc7650cee951b9879613741bd9f9359961810c7e1ba9e84b2af5a365fb914ded5c4660848919fbda67a217813522b0312a0f120a620fc0bdbeceaec684ce9dff8fe57aebc77acf9d56eb53852d0a33752c8be9c94b59cc40a1efaaf7724d361cf573e262d26e2532f178372e089943ec5637082004c8858273f49e5c20fe75a", 0x3, 0x4a, 0x3, 0x2, 0x742, 0x1, 0x6, 'syz1\x00'}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) 06:03:23 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x60) 06:03:23 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x240) 06:03:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe) 06:03:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x401f}]) 06:03:23 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x58a, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:23 executing program 3: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='O\x05\xbbq\xaaR\x86\v\x00\x00\x00\x00\x00\x002\x00', 0x7cbc03, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x405) setsockopt$ax25_int(r1, 0x101, 0x5, &(0x7f00000000c0), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 06:03:23 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x8000, 0x0) 06:03:23 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x4d01}]) 06:03:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 06:03:23 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x700, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:23 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\xf2', 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0xf0401, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r4, 0x90e1cf21655c95cb, &(0x7f0000000180)={'veth0\x00', @ifru_ivalue=0x5}) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) write$9p(r3, &(0x7f0000000240)="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", 0x1000) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000080)={0x3, r2}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r5 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r5, 0x8038550a, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r5, 0xc004aea7, &(0x7f00000001c0)=0x5) 06:03:23 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x74) 06:03:24 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x300) 06:03:24 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x7c15}]) 06:03:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x10) 06:03:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x200, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000080)=0x3) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000100)=""/131) ioctl$sock_ifreq(r0, 0x891e, &(0x7f00000000c0)={'eql\x00\x00\x00\x01\x005\x00', @ifru_mtu=0x9}) 06:03:24 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xe00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x80) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) getpid() r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r3 = accept4$unix(r1, &(0x7f0000000140), &(0x7f00000000c0)=0x6e, 0x80000) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000001c0)) fdatasync(r2) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000370100010900000000000000459a000000000000", @ANYRES32=r2, @ANYRESDEC], 0x30) 06:03:24 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x7d00}]) 06:03:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) 06:03:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='eql\x00\x00\x00\x01\x005\x00', 0xa) 06:03:24 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:24 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xb4) 06:03:25 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x500) 06:03:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x9a02}]) 06:03:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='eth0vmnet1\x00', 0xb) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r2, 0x8038550a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={r5, 0x3adcbb80}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r6, 0x9, 0x2}, 0x8) 06:03:25 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x3f00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x12) 06:03:25 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4800, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x2000b}]) 06:03:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x13) 06:03:25 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:25 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x6000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x14) 06:03:25 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xe0) 06:03:25 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x600) 06:03:25 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x7d000}]) 06:03:25 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x15) 06:03:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x200}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x10, r1, 0x0) r2 = pkey_alloc(0x0, 0x4) pkey_free(r2) 06:03:26 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x6c00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x40000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='\x00', r2}, 0x10) 06:03:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x100000}]) 06:03:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x16) 06:03:26 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x7400, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040)=0x5, &(0x7f0000000080)=0x4) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r5}, &(0x7f0000000600)=0x10) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/96, &(0x7f00000001c0)=0x60) r6 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000300)={{0x7, 0x4, 0x40, 0x7b, '\x00', 0x4}, 0x5, 0x200, 0x2, r6, 0x6, 0x3, 'syz1\x00', &(0x7f0000000280)=['eql\x00\x00\x00\x01\x005\x00', '/dev/bus/usb/00#/00#\x00', '.[-/&!*\x00', '[GPL\x00', 'system\x00', 'wlan0)keyring,^&nodev@wlan0nodev\x00'], 0x54, [], [0x7, 0x401, 0x5, 0xabb]}) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xf24}, 0x8) 06:03:26 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xf0) 06:03:26 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x700) 06:03:26 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x200000}]) 06:03:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x17) 06:03:26 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x7a00, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:26 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x8a05, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18) 06:03:27 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x7d0000}]) 06:03:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x19) 06:03:27 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x30000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0xd00700}]) 06:03:27 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x12c) 06:03:27 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xa00) 06:03:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000100)={0xb, 0x102, 0x0, {0x1ff, 0x8, 0x80000000001, 0x3ff}}) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xee, 0x208140) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={r4, 0x80000}) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) 06:03:27 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x34000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a) 06:03:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x1000000}]) 06:03:27 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x400300, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b) 06:03:27 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x2000000}]) 06:03:27 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r3 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x80002) ioctl$FS_IOC_FSGETXATTR(r3, 0x8038550a, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0xa9f, @mcast2, 0xfffffffeffffffff}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e20, 0x1000, @local, 0x9}, @in6={0xa, 0x4e22, 0x0, @local}, @in6={0xa, 0x4e23, 0x3, @mcast1, 0xa83}, @in6={0xa, 0x4e22, 0x7, @rand_addr="4509d7df9ae087332588f6bd38c6cf7f", 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @broadcast}], 0xbc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, r4}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r4, @in6={{0xa, 0x4e20, 0x8, @empty}}, [0x8, 0x100000000, 0x4, 0x7fff, 0x2, 0x4, 0x1, 0x83e, 0x7, 0x5, 0x1, 0x3, 0x0, 0x3, 0x1]}, &(0x7f0000000180)=0x100) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0x200}) 06:03:27 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = dup(r0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 06:03:28 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x1f4) 06:03:28 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0xe00) 06:03:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c) 06:03:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x3000000}]) 06:03:28 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) fdatasync(r2) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x800, 0x0) getsockopt$bt_hci(r1, 0x65, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags=0xd002}) syz_open_dev$media(&(0x7f0000000040)='/dev/eedza#\x00', 0x7, 0x80) 06:03:28 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) msgget(0x2, 0x14) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xb) 06:03:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d) 06:03:28 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x4000000}]) 06:03:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x00\x8e\b\x00\x00:\xed\x00', @ifru_flags}) 06:03:28 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:29 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x240) 06:03:29 executing program 2: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x10fe) 06:03:29 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x5000000}]) 06:03:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x200008000089f4, &(0x7f0000000000)={'eql\x00\x00\x00\x01\x005\x00', @ifru_flags}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$bt_hci(r4, 0x65, 0x2, 0x0, &(0x7f0000000080)) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000380)=""/252, &(0x7f0000000140)=0xfc) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000002400070500"/20, @ANYRES32=r5, @ANYBLOB="00000000ffffffff0000000008000100636273001ce3020018000100"/48], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x11, 0x9, 0x0, 0x0, {0x0, r5}}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', r5}) 06:03:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e) 06:03:29 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:29 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 464.413581] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 464.452102] kasan: CONFIG_KASAN_INLINE enabled [ 464.456842] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 464.477867] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 464.480009] kobject: 'kvm' (00000000c844cec2): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 464.484129] CPU: 1 PID: 23062 Comm: syz-executor.3 Not tainted 4.19.74 #0 [ 464.484143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.484169] RIP: 0010:hrtimer_active+0x11e/0x230 [ 464.514129] Code: 48 39 c3 0f 84 d3 00 00 00 e8 4e 20 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 464.533019] RSP: 0018:ffff8880504df350 EFLAGS: 00010202 [ 464.538367] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc9000c2a1000 [ 464.545621] RDX: 000000000000dc17 RSI: ffffffff815c4242 RDI: ffff8880984d22c0 [ 464.552876] RBP: ffff8880504df3a8 R08: ffff8880956c64c0 R09: 0000000000000000 [ 464.560227] R10: ffffed101309a40c R11: ffff8880984d2067 R12: 0000000000000010 [ 464.567480] R13: ffff8880984d22c0 R14: ffff8880530cc780 R15: dffffc0000000000 [ 464.574735] FS: 00007f454a7ac700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 464.582942] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.588815] CR2: 000000000075c000 CR3: 00000000599af000 CR4: 00000000001426e0 [ 464.596073] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 464.603325] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 464.610576] Call Trace: [ 464.613164] hrtimer_try_to_cancel+0x74/0x5b0 [ 464.617647] ? hrtimer_run_softirq+0x270/0x270 [ 464.622226] ? __lock_is_held+0xb6/0x140 [ 464.626290] hrtimer_cancel+0x20/0x40 [ 464.630170] qdisc_watchdog_cancel+0x16/0x20 [ 464.634584] cbs_destroy+0x5e/0xd0 [ 464.638109] ? cbs_dequeue_soft+0x400/0x400 [ 464.642418] qdisc_create+0xaa6/0x1230 [ 464.646302] ? tc_get_qdisc+0xbb0/0xbb0 [ 464.650260] ? nla_parse+0x1fc/0x2f0 [ 464.653958] tc_modify_qdisc+0x51b/0x1bdc [ 464.658104] ? qdisc_create+0x1230/0x1230 [ 464.662253] ? find_held_lock+0x35/0x130 [ 464.666306] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 464.671825] ? qdisc_create+0x1230/0x1230 [ 464.675991] rtnetlink_rcv_msg+0x463/0xb00 [ 464.680213] ? rtnetlink_put_metrics+0x560/0x560 [ 464.684957] ? netdev_pick_tx+0x300/0x300 [ 464.689091] ? netlink_deliver_tap+0x22d/0xc20 [ 464.693658] ? find_held_lock+0x35/0x130 [ 464.697706] netlink_rcv_skb+0x17d/0x460 [ 464.701751] ? rtnetlink_put_metrics+0x560/0x560 [ 464.706491] ? netlink_ack+0xb30/0xb30 [ 464.710364] ? kasan_check_read+0x11/0x20 [ 464.714498] ? netlink_deliver_tap+0x254/0xc20 [ 464.719066] rtnetlink_rcv+0x1d/0x30 [ 464.722771] netlink_unicast+0x537/0x720 [ 464.726818] ? netlink_attachskb+0x770/0x770 [ 464.731223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.736746] netlink_sendmsg+0x8ae/0xd70 [ 464.740805] ? netlink_unicast+0x720/0x720 [ 464.745027] ? selinux_socket_sendmsg+0x36/0x40 [ 464.749690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.755215] ? security_socket_sendmsg+0x8d/0xc0 [ 464.759952] ? netlink_unicast+0x720/0x720 [ 464.764174] sock_sendmsg+0xd7/0x130 [ 464.767873] ___sys_sendmsg+0x803/0x920 [ 464.771842] ? copy_msghdr_from_user+0x430/0x430 [ 464.776584] ? lock_downgrade+0x810/0x810 [ 464.780719] ? kasan_check_read+0x11/0x20 [ 464.784856] ? __fget+0x367/0x540 [ 464.788295] ? iterate_fd+0x360/0x360 [ 464.792080] ? lock_downgrade+0x810/0x810 [ 464.796226] ? __fget_light+0x1a9/0x230 [ 464.800190] ? __fdget+0x1b/0x20 [ 464.803540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 464.809063] __sys_sendmsg+0x105/0x1d0 [ 464.812937] ? __ia32_sys_shutdown+0x80/0x80 [ 464.817337] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 464.822080] ? do_syscall_64+0x26/0x620 [ 464.826041] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.831388] ? do_syscall_64+0x26/0x620 [ 464.835359] __x64_sys_sendmsg+0x78/0xb0 [ 464.839408] do_syscall_64+0xfd/0x620 [ 464.843201] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 464.848380] RIP: 0033:0x459a09 [ 464.851558] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 464.870549] RSP: 002b:00007f454a7abc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.878248] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a09 [ 464.885510] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000008 [ 464.892767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 464.900022] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f454a7ac6d4 [ 464.907276] R13: 00000000004c7933 R14: 00000000004dd328 R15: 00000000ffffffff [ 464.914547] Modules linked in: 06:03:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x6000000}]) 06:03:30 executing program 0: pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0x10) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf3, 0x21fc}, 0x14) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000100)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffd83) splice(r0, 0x0, r2, 0x0, 0x4b40, 0x300) 06:03:30 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) [ 464.945980] kobject: 'loop5' (0000000024932aa2): kobject_uevent_env [ 464.952581] kobject: 'loop5' (0000000024932aa2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 464.965959] ---[ end trace a678a4be366e285c ]--- [ 464.976356] RIP: 0010:hrtimer_active+0x11e/0x230 06:03:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f20e035002000000f22e0f26cc4c1d5e8a02d00000066bad00466b855b266efb9800000c00f3235008000000f303e660fc7b4c10a0000000f01df66ba420066edb8003800000f23d00f21f835200000050f23f866ba430066ed", 0x5a}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cd]}) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x0, @link_local, 'syz_tun\x00'}}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") ioctl$KVM_RUN(r2, 0xae80, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29) [ 464.984532] Code: 48 39 c3 0f 84 d3 00 00 00 e8 4e 20 0f 00 48 8b 45 c8 80 38 00 0f 85 06 01 00 00 49 8b 5d 30 4c 8d 63 10 4c 89 e0 48 c1 e8 03 <42> 0f b6 14 38 4c 89 e0 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 464.992048] kobject: 'loop4' (00000000d4814108): kobject_uevent_env [ 465.024475] kobject: 'loop4' (00000000d4814108): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 465.031197] RSP: 0018:ffff8880504df350 EFLAGS: 00010202 06:03:30 executing program 4: r0 = socket(0x1e, 0x1, 0x0) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000100)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x80, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000500)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f0000000140)={0x30, r2, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) 06:03:30 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) close(r0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x7000000}]) [ 465.036461] kobject: 'kvm' (00000000c844cec2): kobject_uevent_env [ 465.040740] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffc9000c2a1000 [ 465.057780] kobject: 'kvm' (00000000c844cec2): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 465.066137] kobject: 'loop1' (00000000bed34c50): kobject_uevent_env [ 465.084562] kobject: 'loop1' (00000000bed34c50): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 465.094466] RDX: 000000000000dc17 RSI: ffffffff815c4242 RDI: ffff8880984d22c0 [ 465.102467] RBP: ffff8880504df3a8 R08: ffff8880956c64c0 R09: 0000000000000000 [ 465.114870] kobject: 'loop5' (0000000024932aa2): kobject_uevent_env [ 465.121386] R10: ffffed101309a40c R11: ffff8880984d2067 R12: 0000000000000010 [ 465.124667] kobject: 'loop5' (0000000024932aa2): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 465.136631] R13: ffff8880984d22c0 R14: ffff8880530cc780 R15: dffffc0000000000 [ 465.146392] FS: 00007f454a7ac700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 465.161071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.167422] CR2: 0000000000000000 CR3: 00000000599af000 CR4: 00000000001426e0 [ 465.174705] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 465.182025] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 465.189350] Kernel panic - not syncing: Fatal exception [ 465.192116] kobject: 'loop5' (0000000024932aa2): kobject_uevent_env [ 465.196082] Kernel Offset: disabled [ 465.206078] Rebooting in 86400 seconds..