0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r7, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r10 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r10, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r11 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:34 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x28}, 0x10) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x4, @vbi}) 03:38:34 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000001c0)=0x1) r1 = socket$can_bcm(0x1d, 0x2, 0x2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x0) connect$can_bcm(r1, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000040), 0xf, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c3ade46fd7cf60e9"}}, 0x48}}, 0x0) 03:38:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) syz_open_dev$mice(&(0x7f0000000500)='/dev/input/mice\x00', 0x0, 0x240000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000012000/0x1000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000040)=0x7, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x4, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000540)=0x6) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) capget(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000500)={0x92c, 0x1ff, 0x3, 0x80, 0x3f, 0xfffffffffffffffe}) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:38:34 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@full={0xb, @remote, @default, 0x0, [@default, @rose, @rose, @rose, @default, @bcast]}, 0x40) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x80) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x4000) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000040)={0x0, 0x9}) 03:38:34 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) fcntl$getown(r2, 0x9) getpgid(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r8, 0x800000000008982, &(0x7f0000000080)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r7, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r10 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r10, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r11 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:34 executing program 0: ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x246) write$P9_RLERRORu(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a04eec4614ff07"], 0x2) close(r0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x803) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) creat(&(0x7f00000002c0)='./file0\x00', 0x140) r2 = getuid() setfsuid(r2) 03:38:34 executing program 0: r0 = socket$inet(0x10, 0x2000000000000002, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d0000000200001f01000000fc0002c9130003000000000050000000586700a28663b3", 0x2f}], 0x1}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 03:38:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xfffffffffffffffd, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:36 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0xfffffffffffffffe) 03:38:36 executing program 2: r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10) getsockname(r0, &(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000001240)=0x80) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @loopback, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000300000000000000907809000000ffffffff0000000000089078"], 0x0) 03:38:36 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) fcntl$getown(r2, 0x9) getpgid(0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r8, 0x800000000008982, &(0x7f0000000080)) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r7, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r10 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r10, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r11 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r9, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:36 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="00fb4e02e09b57bd1beed062e4d30e7dfbd2077bad5a526cd8cee10d867812be9020231f0a617cc0f8a3c70b1329044521342aa5887d2bdff8b43d522fc3f62ddba15e0e9375fc1ece65d25bc534"], 0x4e, 0x2) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='cpu.stat\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000340)=0x1005) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x28) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80000000, 0x7, 0x5, 0xf0}, {0x0, 0x5, 0x3b, 0x30}, {0x7e, 0x8000006, 0x6, 0x8}]}, 0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000080)=0x44) 03:38:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) r6 = geteuid() getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@empty}}, &(0x7f0000000540)=0xe8) getgroups(0x1, &(0x7f0000000580)=[0x0]) sendmsg$netlink(r4, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, &(0x7f0000000500)=[{&(0x7f0000000640)={0x168, 0x11, 0x500, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x36, @uid=r6}, @generic="cd53e7be032546c73ebfd074aeadf7ec24073f88009271ba58e631f80d8c71f535151c56675879066780fcb7df4be7c8dc750ff0c47821bb8c2226c21e2ecf", @generic="4481fbbd64924f793849a07187a0eeee06ff820cc128c1bbf8bbb56e25f256a54afc9f567282c74ef9013d527b716ea26aa4695ae3a0de9e0b48c382509f5aaa3866cea55c35c46dbd313fa4f4f9db40bd751bdb0f41617ad909e4fe03406cf1324a13c6a805fca747d0e938745ab6cb099ec0ff88c56e54ef0755aff9019ea2506c094a68d4b8a1e624819518a23dd04069899f0081c4b97eece14af8a0a314d802b4ef99f2ac1aebc49edae0213bc74e4dc94b7c1ce1a2f1b3d16b2488fa5d831f60724b31a30c43d35ba3891a8894a8d0d2e00c115bac9b7012b5a6e2c12998909f08da", @nested={0xc, 0x9, [@typed={0x8, 0x8e, @fd=r0}]}, @generic="cd69de635ca50ab1592ba33e2d1d5d680c75", @typed={0xc, 0x79, @u64=0x80}]}, 0x168}], 0x1, &(0x7f00000008c0)=[@rights={0x28, 0x1, 0x1, [r0, r1, r4, r3, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r7, r8}, @rights={0x20, 0x1, 0x1, [r3, r5, r3]}], 0x68, 0x10}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r9 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r10 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r3, 0x26) r11 = dup2(r10, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r11, 0x4b34, 0x50) [ 751.442026][ C1] net_ratelimit: 20 callbacks suppressed [ 751.442038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 751.453716][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 751.522519][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 751.529966][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:37 executing program 2: semop(0x0, &(0x7f0000000080)=[{0x0, 0x0, 0x800}], 0x1) r0 = request_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='losecurity\x00', 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x7, 0x20, 0x800, 0x7ff, 0x401, 0xf5}) 03:38:37 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x82000) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r5 = syz_open_pts(r3, 0x0) ppoll(&(0x7f00000000c0)=[{r5}], 0x3e, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000300)={{0x2, 0x4e23, @multicast1}, {0x0, @remote}, 0x6, {0x2, 0x4e24, @multicast2}, 'bond_slave_1\x00'}) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='lp\x00', 0x3) r6 = open(0x0, 0x0, 0x0) openat$cgroup(r6, &(0x7f0000000240)='syz1\x00', 0x200002, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) nanosleep(0x0, &(0x7f0000000380)) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000000)) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) sendto$inet6(r2, &(0x7f0000000500)="2ff6508a80367565414cb3bddeb37393bd3e2535e472e5e59baedfdd1d0ac1401a2138346b495b5dbff9d149f08a72eb767bc60fc316eb39ff6bac6ee61b9b5218633bff8baa12d376c07df8d83b741b3674a1a12360520fb4be2b77c44edfba8627e1bac6844f65f836b9e8d4486f816b8ddd2d784ccfe122dbd7480699260dfef9022faddd9be5d7cb274f49021610a819377200a5f53e31ba607e9fca0c6288317ac6", 0xa4, 0x0, 0x0, 0x0) r7 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0) 03:38:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:37 executing program 0: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) fremovexattr(r0, &(0x7f0000000000)=@random={'trusted.', 'systemvmnet1\x00'}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x50000000, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 03:38:37 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x22) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0xffffffffffffffd8) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000600), &(0x7f00000000c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000005c0)=0x1, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000001c0)=0x6, 0x4) getpeername(r3, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80) fcntl$lock(r4, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) syz_genetlink_get_family_id$nbd(&(0x7f0000000880)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="186ecee8b9202a6378856b"], 0x1}}, 0x845) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000780)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) r5 = openat$cgroup_int(r0, &(0x7f0000000680)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000240)={0x20, 0x0, 0x7, {0x0, 0x2}}, 0x20) sendfile(r5, r5, 0x0, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)) 03:38:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:37 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="b7dc1f123c123f3188b070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x145800, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000140)={0xfffffffffffffff8, "14eeaf45439edac18c087536c6c91809b516ddc381d5434fabac74e8f72af450", 0x1880, 0x9, 0x4, 0x4, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000000c0)={0x6, 0x600000000000000, [0x40000071], [0xc2]}) 03:38:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000500)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) bind$xdp(r0, &(0x7f0000000640)={0x2c, 0x7, r5, 0x38, r2}, 0x10) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) [ 752.081958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 752.087853][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:37 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/audio\x00', 0x200, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000400)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x40) ioctl$TUNSETLINK(r3, 0x400454cd, 0xffff) fstat(r2, &(0x7f0000000440)) setsockopt$sock_void(r3, 0x1, 0x3f, 0x0, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x200, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0xfe1d) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/groa\xb2\x00', 0x2761, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r5) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f00000004c0)={0x3, 0x1, 0x3, 0x4, 0x16, 0x4, 0x9, 0x2982, 0xffff, 0x2}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={r6, @in6={{0xa, 0x4e20, 0x2, @remote}}, 0xe72, 0x5, 0xffffffff, 0xfff}, 0x98) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000280)={0x2bb8, {{0x2, 0x4e24, @loopback}}, {{0x2, 0x4e24, @rand_addr=0x2}}}, 0x108) 03:38:37 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000500)='./file0\x00', 0x7, 0x2, &(0x7f0000000640)=[{&(0x7f0000000540)="ed8a54044d1917c0560087c3361d1af0d69045c90f15dc1597db6443078019bdb30ffbf3ced6fe35e412ebbf6295c7354a22ce92fa32f3deeb133571a2ef8ec1e88a6072ca5a2c0839c1334c0e1bc2ed1cd6ad0e286d3b3c67302a3f8d207327919c85b7ce17bb5759ec282cc002ee529024", 0x72, 0xfffffffffffffffa}, {&(0x7f00000005c0)="1a87a2a7d9c8e98a4b49f1620d9fe0d5af4fb50716", 0x15, 0xffffffffffff5d40}], 0x8000, &(0x7f0000000680)={[{@nodots='nodots'}, {@dots='dots'}, {@dots='dots'}, {@nodots='nodots'}, {@fat=@check_relaxed='check=relaxed'}, {@dots='dots'}, {@dots='dots'}, {@dots='dots'}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:38:38 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x22) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0xffffffffffffffd8) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000600), &(0x7f00000000c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000005c0)=0x1, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000001c0)=0x6, 0x4) getpeername(r3, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80) fcntl$lock(r4, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) syz_genetlink_get_family_id$nbd(&(0x7f0000000880)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="186ecee8b9202a6378856b"], 0x1}}, 0x845) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000780)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) r5 = openat$cgroup_int(r0, &(0x7f0000000680)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000240)={0x20, 0x0, 0x7, {0x0, 0x2}}, 0x20) sendfile(r5, r5, 0x0, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)) 03:38:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 752.653142][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 752.661688][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 752.673257][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 752.687908][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:38 executing program 0: r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89fd, &(0x7f0000000100)="1c8370cb8b62547c37359985d087c49bf81dad909ed2c28c3110d5f8507094b9e0247db4661498164c8747711d5a9145f76cffb9ab8d3cbed072b1f252") sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000040)=@nl, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000d00)="5500000018007fd500fe01b2a4a280930a06000000a8430891000000390008000a00110000dc13389d0d4ac5b824666ac5925e980bf54d85d54400009b84136ef75afb83de448daa72540d816ed2c55327c43ace22", 0x55}], 0x1, &(0x7f0000000100)}, 0x0) 03:38:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0xe6, 0x4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x7) socket$packet(0x11, 0x2, 0x300) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000005c0)={0x74b4, 0x8, 0x20, 0x0, 0x9, 0xafb, 0x2, 0x6b, 0x7, 0x6, 0x9, 0x6, 0x0, 0x9, 0x4dcd, 0xc835, 0x9, 0x5, 0xca9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000540)={0xbbd, 0x0, 0x6, 0x401, &(0x7f0000000500)}) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:38 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x4004) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0xff}, 0x28, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000000)={0x2de, 0x0, 0x0, 0x0, 0x0, 0x0}) 03:38:38 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:38 executing program 1: r0 = socket$inet6(0xa, 0x200000000000003, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x40000000000c8, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x300605, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaa2aaaaaaa871b0f5ca5af8df22a91be10160c29000506000000bf4be936b3498c93d9530691f572de9a8586dd60b4090000032f0006000000000002ff020000000000000000000000000001830090780000040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb00000000000000"], 0x0) 03:38:38 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x6, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_aout(r0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x9, 0x20000) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x800, 0xbd5}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e21, 0xf1e, @mcast2, 0x8001}}}, 0x84) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x5, @remote, 0x2}}, [0x0, 0x3, 0x0, 0x6, 0x5, 0x6, 0x20, 0x9, 0x6, 0x401, 0x1d, 0x2, 0x1, 0x0, 0x3]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000002c0)={r4, 0x6, 0x0, 0xfffffffffffffff9}, 0x10) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x101a00, 0x0) setsockopt$ax25_int(r5, 0x101, 0x8, &(0x7f00000000c0)=0x6, 0x4) ftruncate(r0, 0x8) 03:38:38 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0xffffffff, 0xd54f, 0x7f, 0x6, 0x6, 0x9}, 0x6}, 0xa) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x22) accept(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80) 03:38:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x644b59683240c5f7, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x83, 0x7, 0x3000}, 0x4) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x22) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0xffffffffffffffd8) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000600), &(0x7f00000000c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000005c0)=0x1, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000001c0)=0x6, 0x4) getpeername(r3, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80) fcntl$lock(r4, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) syz_genetlink_get_family_id$nbd(&(0x7f0000000880)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="186ecee8b9202a6378856b"], 0x1}}, 0x845) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000780)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) r5 = openat$cgroup_int(r0, &(0x7f0000000680)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000240)={0x20, 0x0, 0x7, {0x0, 0x2}}, 0x20) sendfile(r5, r5, 0x0, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)) 03:38:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101400, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000480)={0x3, 0x0, [{0xf0ca, 0x4, 0x0, 0x0, @irqchip={0x8, 0x76d0}}, {0x18000, 0x2, 0x0, 0x0, @msi={0x5, 0x8d, 0x7fff}}, {0x100, 0x3, 0x0, 0x0, @msi={0x8f2, 0x2, 0xfffffffffffffff9}}]}) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000140)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f0000000080)="67662e660f3880bb02000f01ca66ba2100edb9800000c00f3235004000000f300f005490f62e0f306767260f01d1660f70a5f20000000066b8b2000f00d866b8e5000f00d8", 0x45}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, 0x0, &(0x7f0000000100)) fsetxattr$trusted_overlay_upper(r2, &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="00fbce0140c24c04b4e85c6e5e9bcda72eba812e03cb721107be6340497c542d1a4b51226fedc181e670d489d7d9ce77dd6326231a334bed6ca0fe7cd23182b9b1c12fa02cb9805a257428e18329514001ec382458e2100e2c1889c440bd2e7a073bcc115063fcb6422cad6dde75180a71c99d762e83bd419f8204521d3b28ec7563a2498d5ee2756c8014eb4f37805946a2bcf009ab70a5bc09d17bf263e289aef4bf259509b62df035323793209304f7b7f0d1578a3b98a2f62e776b1f62afee52a855801427a3880169da70f5"], 0xce, 0x3) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000400)=0x1) 03:38:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:39 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000340)='team\x00') ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdir(&(0x7f0000000700)='./file0\x00', 0x22) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ubi_ctrl\x00', 0x80000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0xffffffffffffffd8) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000600), &(0x7f00000000c0)=0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000005c0)=0x1, 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000440)={0x77359400}, 0x10) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000001c0)=0x6, 0x4) getpeername(r3, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000380)=0x80) fcntl$lock(r4, 0x6, &(0x7f0000000480)={0x0, 0x1, 0x6, 0x9}) syz_genetlink_get_family_id$nbd(&(0x7f0000000880)='nbd\x00') sendmsg$NBD_CMD_STATUS(r3, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="186ecee8b9202a6378856b"], 0x1}}, 0x845) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000780)) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, &(0x7f0000000200)) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000740), 0xffffffffffffffff) r5 = openat$cgroup_int(r0, &(0x7f0000000680)='cpuset.mem_exclusive\x00', 0x2, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000240)={0x20, 0x0, 0x7, {0x0, 0x2}}, 0x20) sendfile(r5, r5, 0x0, 0x9) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)) 03:38:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x10002, 0x0) mkdirat(r1, &(0x7f0000000500)='./file0\x00', 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r2, 0x2000000000000015) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000040)={0x403f, 0x9, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) set_mempolicy(0x3, &(0x7f0000000540)=0x4, 0x8) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r3, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x8) 03:38:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x200002, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, {0xffffffff, 0xd54f, 0x7f, 0x6, 0x6, 0x9}, 0x6}, 0xa) fchdir(r0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x22) accept(r1, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000001c0)=0x80) 03:38:39 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000500), &(0x7f0000000580)=0x60) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x240) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x4) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r6 = dup2(r5, r4) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000040)={0x7, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:38:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:39 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:39 executing program 0: getsockopt$rose(0xffffffffffffffff, 0x104, 0x5, 0x0, &(0x7f00000000c0)) 03:38:39 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1, 0x100000000000914, 0x5}, 0x2a1) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x108) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) 03:38:39 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000000)={0x0, @speck128}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f, 0x0, 0x0, 0x28, 0x0, 0x6500}) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='bond_slave_1\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:38:40 executing program 1: r0 = creat(&(0x7f0000000000)='./file1\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00['], 0x2) fadvise64(r0, 0x0, 0x2, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x28}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}]}, 0x70}, 0x1, 0x0, 0x0, 0x4850}, 0x840) 03:38:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x1d1080, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000640)={0x2, 0x0, 0x2080, {0x15000, 0x5000, 0x1}, [], "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", "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"}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:40 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) getpeername(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x7a0f, 0x1700) clone(0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x7f, 0x8000, 0xf2, 0x1, 0xa, 0x7, 0x9, 0x4f3ecdb3, 0x21b3, 0x7}) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) write(0xffffffffffffffff, 0x0, 0x0) 03:38:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:40 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200000, 0x0) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x9, 0x400) io_setup(0x1, &(0x7f0000000000)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f00000002c0)="8dc0e732aa6e6de910804a41f15b6a3736682673485ab50f5496e7aea45cc88f372b2b2b90ccbb09a19754f1157a9e1a5dc598d3877b47c8953a831a9cfd38783fdab4af29abbd5f1fcc5cba3ab5062d10546bab485bfea7bb7daa7107ed47ea4989a7873f56ccec7b3b5d56532d37457b67a34adc9ccec272b68d2a4155a1741d8cd0133286b3a805424835b6f722d46d3b6dc5b18046b55fbb4247abdda7418348411b48795b862ff7613041b5984e36ba66b6f67c77a0", 0xb8, 0x9, 0x0, 0x0, r0}, &(0x7f0000000380)) syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x1, 0x2) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000001c0)=0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8b, 0x0) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x4, 0x6, 0x3ff, 0x5, 0x0, 0x5, 0x4, 0x2, 0x8001, 0x7ff00, 0x10000, 0x24d, 0x7, 0x18000000000, 0x1, 0x7219, 0x100, 0x100000000, 0x400, 0x4, 0x205, 0x13553ceb, 0x3, 0x401, 0x5, 0x6, 0x5, 0x4, 0x10001, 0x4, 0x8000, 0x8, 0x2, 0x101, 0xfffffffffffffe00, 0x2e9, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x24}, 0x8, 0x9, 0x7, 0x6, 0x6, 0xdf0, 0xece}, r3, 0x7, r4, 0x1) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2, 0x0) 03:38:40 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x4, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) ptrace$getsig(0x4202, r1, 0x1, &(0x7f0000000500)) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:40 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000a980)='/dev/qat_adf_ctl\x00', 0x408800, 0x0) recvmmsg(r0, &(0x7f000000a6c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/243, 0xf3}], 0x1}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000300)=""/142, 0x8e}, {&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/60, 0x3c}, {&(0x7f0000000440)=""/215, 0xd7}, {&(0x7f0000000540)=""/12, 0xc}], 0x7}, 0x1}, {{&(0x7f0000000600)=@tipc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000680)=""/127, 0x7f}], 0x1, &(0x7f0000000740)=""/185, 0xb9}, 0x401}, {{&(0x7f0000000800)=@hci, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000880)=""/209, 0xd1}, {&(0x7f0000000980)=""/138, 0x8a}, {&(0x7f0000000a40)=""/218, 0xda}, {&(0x7f0000000b40)=""/112, 0x70}, {&(0x7f0000000bc0)=""/240, 0xf0}, {&(0x7f0000000cc0)=""/232, 0xe8}, {&(0x7f0000000dc0)=""/120, 0x78}], 0x7, &(0x7f0000000ec0)=""/187, 0xbb}, 0x8000}, {{&(0x7f0000000f80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000002280)=[{&(0x7f0000001000)=""/127, 0x7f}, {&(0x7f0000001080)=""/247, 0xf7}, {&(0x7f0000001180)=""/10, 0xa}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/161, 0xa1}], 0x5}, 0x1}, {{&(0x7f0000002300)=@tipc=@name, 0x80, &(0x7f0000003540)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/28, 0x1c}, {&(0x7f00000033c0)=""/9, 0x9}, {&(0x7f0000003400)=""/24, 0x18}, {&(0x7f0000003440)=""/35, 0x23}, {&(0x7f0000003480)=""/141, 0x8d}], 0x6}, 0x80000000}, {{&(0x7f00000035c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x80, &(0x7f0000004900)=[{&(0x7f0000003640)=""/67, 0x43}, {&(0x7f00000036c0)=""/19, 0x13}, {&(0x7f0000003700)=""/96, 0x60}, {&(0x7f0000003780)=""/203, 0xcb}, {&(0x7f0000003880)=""/91, 0x5b}, {&(0x7f0000003900)=""/4096, 0x1000}], 0x6, &(0x7f0000004980)=""/35, 0x23}, 0x1000}, {{&(0x7f00000049c0)=@isdn, 0x80, &(0x7f00000060c0)=[{&(0x7f0000004a40)=""/189, 0xbd}, {&(0x7f0000004b00)=""/241, 0xf1}, {&(0x7f0000004c00)=""/202, 0xca}, {&(0x7f0000004d00)=""/105, 0x69}, {&(0x7f0000004d80)=""/169, 0xa9}, {&(0x7f0000004e40)=""/239, 0xef}, {&(0x7f0000004f40)=""/11, 0xb}, {&(0x7f0000004f80)=""/55, 0x37}, {&(0x7f0000004fc0)=""/229, 0xe5}, {&(0x7f00000050c0)=""/4096, 0x1000}], 0xa}, 0x6}, {{0x0, 0x0, &(0x7f0000008440)=[{&(0x7f0000006180)=""/52, 0x34}, {&(0x7f00000061c0)=""/105, 0x69}, {&(0x7f0000006240)=""/9, 0x9}, {&(0x7f0000006280)=""/174, 0xae}, {&(0x7f0000006340)=""/229, 0xe5}, {&(0x7f0000006440)=""/4096, 0x1000}, {&(0x7f0000007440)=""/4096, 0x1000}], 0x7, &(0x7f00000084c0)=""/4096, 0x1000}, 0x200}, {{&(0x7f00000094c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f000000a640)=[{&(0x7f0000009540)=""/4096, 0x1000}, {&(0x7f000000a540)=""/42, 0x2a}, {&(0x7f000000a580)=""/146, 0x92}], 0x3, &(0x7f000000a680)=""/1, 0x1}, 0x6}], 0xa, 0x2, &(0x7f000000a940)={0x0, 0x1c9c380}) socket$alg(0x26, 0xa, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000100)=0x4) 03:38:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:40 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) ioctl$VT_ACTIVATE(r0, 0x5437, 0x0) 03:38:40 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'bond_slave_1\x00'}, 0x18) 03:38:40 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:40 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x7) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) ioctl(r0, 0xffffffdffbffffa9, &(0x7f0000000000)) 03:38:40 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clock_nanosleep(0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c9c380}, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x9, 0x101000) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x4c, &(0x7f0000000100)=0x4) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4020, 0x40) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0x40045731, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, [0xfeffffff]}) 03:38:41 executing program 2: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x420, 0x4) socket$inet6(0xa, 0x6, 0x0) 03:38:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000500)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000680)=""/116, 0x74}], 0x33b, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x400200, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000540)=0x80000001) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) accept4$netrom(r4, &(0x7f0000000580)={{0x3, @null}, [@bcast, @remote, @rose, @default, @netrom, @null, @bcast, @bcast]}, &(0x7f0000000640)=0x48, 0x800) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:41 executing program 1: semctl$SETALL(0x0, 0x0, 0x14, &(0x7f0000000080)=[0x84, 0x80000001]) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x367, 0x3, [0x5, 0xdf, 0x8]}, 0xe) memfd_create(&(0x7f00000000c0)=')${/+#!eth1]bdevbdevnodev-/\x00', 0x3) 03:38:41 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$ASHMEM_GET_PROT_MASK(r5, 0x7706, &(0x7f0000000040)) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:41 executing program 0: r0 = memfd_create(&(0x7f0000000000)='\xf3Mat\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f00005eaff8)) syz_open_procfs(0x0, &(0x7f0000000080)='status\x00') syz_open_procfs(0x0, &(0x7f0000000300)='O\xc65IF\xea') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000002c0), 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}, 0x1e) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snapshot\x00', 0x1, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@remote, @loopback}, &(0x7f0000000100)=0x8) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000000)=0x4) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) sendmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="e04a998a18ecab4ccf9f92d44af7f4f21c97cc92cfb2920aba0b8c7970f1191ffc760717e857d8c6ebf08070943cc532fc7e75dea21a92fa68d59c9e02d3458992f138c132121732504aa5614f18ec2ec9ffc0836e00b5a4c681374cc50f68f203d9d7b70288618862c82f849931488b694f0d63670e0782ffbf0ce00ee0a3c22051779fe656875c15423571f483e3308f", 0x91}], 0x1}, 0x7f}, {{&(0x7f00000027c0)=@ipx={0x4, 0x3, 0x3, "3fd5aa2cea5a", 0x1}, 0x80, 0x0}, 0x7fff}, {{&(0x7f0000003a80)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x80, 0x0}, 0xfd}], 0x3, 0x10) 03:38:41 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x100) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000000000)={0x5, 0x1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xa0080, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x0, 0x4, 0x1, r2}) 03:38:41 executing program 2: r0 = socket$inet6_sctp(0xa, 0x80000000000005, 0x84) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x400, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="fbddf9e6b9416ce3772b370c8d7c930cbece38d5462c0782486e2c06d0c4fd432f077850850258c45798eea240e33cd5bbbea1b2a5b0834a1622b132") ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={@remote={[], 0x3}, 0x1, 'eql\x00'}) getsockopt$sock_int(r0, 0x1, 0x32, &(0x7f00000000c0), &(0x7f0000000280)=0x140) r2 = syz_open_dev$media(&(0x7f0000000140)='/dev/media#\x00', 0x80, 0x400200) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x84, 0x70, &(0x7f0000000000)={'TP]\x91\x00\x00\x00\x00\x00\x00\x00\x00\xde\xff\xff\xff\xff\xff\xff\xff\x00'}, &(0x7f0000000200)=0x1e) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000180)=r1) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0xffffffff) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000300)={0xfa2, 0x1f, 0x8001, 0x81, 0x6, 0x6, 0x1, 0x4, 0x0}, &(0x7f0000000240)=0x20) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r3, 0x3, 0x7}, &(0x7f00000002c0)=0xc) 03:38:41 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xff, 0x402001) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'bond_slave_1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00072f18afdaee1d3650000000000003088cf1067d1c9a4ea2e18f74b7d79096646d174bc795b293a68c82418ac010b183fc874793f2bf115a95d1d461c227f0000000000000014eb533ad1524c9fd4a768b71de574faf33f962e0bc69c85f9345e691c7b1d007f889ed1113cd03c4fd244b600"], 0x10) 03:38:41 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:41 executing program 2: socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0}, &(0x7f00000000c0)=0x14) bind$packet(r2, &(0x7f0000000100)={0x11, 0x17, r3, 0x1, 0x4d4, 0x6, @broadcast}, 0x14) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000140)={0x3, [0x5, 0x3914, 0x6]}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x2b}, 0x0, @in, 0x0, 0x4}}, 0xe8) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) 03:38:41 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000480)='/dev/audio#\x00', 0xfffffffffffffff8, 0x18b080) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128l-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x5, 0x0, 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) r3 = getpgid(r2) capset(&(0x7f0000000040)={0x19980330, r3}, &(0x7f0000000080)={0x1000, 0x1, 0x3ff, 0x9, 0x7, 0x8}) r4 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xffffffffffffff80, 0x103000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000280)={r5, 0x96cb, 0xd51e, 0x9, 0x8f, 0xf8, 0x9d2, 0x1f, {0x0, @in6={{0xa, 0x4e22, 0xffff, @mcast2}}, 0x2, 0x81, 0x0, 0x9, 0x3f}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000380)={r5, 0xffffffff, 0x5, 0x9, 0x3, 0x35c4, 0x1, 0xffff, {r6, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x100000000, 0x9, 0x1, 0xffff, 0x3f}}, &(0x7f0000000440)=0xb0) r7 = syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/uts\x00') capset(&(0x7f00000000c0)={0x20071026, r3}, &(0x7f0000000100)={0x1ff, 0xda, 0x5, 0x0, 0xfffffffffffffffd, 0x1}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='illinois\x00', 0x9) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='9p\x00', 0x48800, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@msize={'msize', 0x3d, 0x100000000}}, {@debug={'debug', 0x3d, 0xf4}}, {@version_u='version=9p2000.u'}, {@uname={'uname', 0x3d, 'M'}}, {@version_L='version=9p2000.L'}], [{@fowner_lt={'fowner<', r8}}]}}) 03:38:42 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 756.801942][ C1] net_ratelimit: 20 callbacks suppressed [ 756.801952][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 756.813472][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 756.819317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 756.825159][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 756.830974][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 756.836802][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 757.691986][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 757.697883][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 757.762009][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 757.767881][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x80803, 0x87) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr, 0x400}, 0x1c) 03:38:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x2180) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000091000000b700000000000000e705000000000000090000000000000007000000000000000002000000000000030000000000000005faffffff0000000100008a0f81800f003827455b7639632ab0490000000000000000000000000009000000000000002f040000000000000251000000000000"]) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) semget$private(0x0, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x600, 0x2000000000002) r2 = accept4(r1, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80, 0x80800) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000200)={0x6, {{0xa, 0x4e22, 0x5, @mcast2, 0xffffffff}}}, 0x88) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x0, 0x7fff}) 03:38:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:44 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f000045fff8)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000040)={0x1, 0xeca, 0x2}) ptrace(0x4207, r2) wait4(r1, 0x0, 0x40000000, 0x0) wait4(r2, 0x0, 0x2, &(0x7f00000001c0)) waitid(0x0, 0x0, 0x0, 0xa0000003, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000100)={{0x5, 0x1f}, 'port0\x00', 0xc5, 0x400, 0xffff, 0x8, 0x8, 0x9, 0x200, 0x0, 0x2, 0x81}) 03:38:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f0000000540)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x1fffffffffffe) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000040)=r1) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:44 executing program 1: set_mempolicy(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:44 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x400001) ioctl$KVM_NMI(r1, 0xae9a) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0xfffffffffffffffc}) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x6, 0x2, 0x0, 0x6, 0x7, 0x7, 0x1, 0x1}}) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000200)={0x75700000000000, 0x9}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x12, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000006ad78a73b0ed2ebb8d6d94083b18c156f66e0238724a0eead701565c9a66dae3a0ecac809f0f290f93fcf83cf4a19b1e0e78f7823ab9"], &(0x7f0000000080)=0x4) signalfd4(r1, &(0x7f0000000240)={0x3}, 0x8, 0x80000) 03:38:44 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000540)={r3, 0x200, 0x22}, &(0x7f0000000580)=0x8) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:38:44 executing program 2: io_setup(0x5, &(0x7f0000000100)=0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x1d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x0, 0x1, {0xa, 0x4e21, 0x7f, @local, 0x3}}}, 0x32) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_submit(r0, 0x2, &(0x7f0000000b40)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x0]) 03:38:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xa83, 0x80000) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:44 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0xa, 0x5, 0x84) r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000003c0)='ip6_vti0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @dev={0xfe, 0x80, [], 0x26}, 0x9}, 0xb) connect$l2tp(r1, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000003a40)=[{{&(0x7f0000000100)=@l2={0x1f, 0x9, {0x7, 0x62, 0x7, 0x6, 0x1, 0x6c}, 0x7ff, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="5ade5f71d46358050d897e51f53699ebede36e70ea215bb1b58204db6ebc99131c4d40a9ec3f077d29a4ea5a82b184135a66830c3b1b846d563cf0dc06ad976be0f383c47f10b9a0f45d2852c4a0424f0b", 0x51}, {&(0x7f0000000240)="a00fa5a53d41d20b20c8baeb9175b9c00a56bc86e3cccdeb034d4e1cfc80db1ab5dc9ef30449a1b703b75552212cc0340b17247d321da508e6e66d7a800b23b31c2d286e5f6ffd20bbcb8fc557e9b79d41e7704caaaca34c8bee15dc173b793936309c0ff0054482312af894dfe5b6aed09723baa5b9f91bb0c142c44e57727e51f2118c94fc7d36d095ad9dd59669f1c156304ad3b1ff04b00d0360625966efeceafc0f91502876049952f8e05dfb", 0xaf}, {&(0x7f0000000300)="49a99e90a2defec337ad2eaf7abd6e0f498fa7dd177829bd9d736caa7b515cb4c00cefc3ce2a48aaa992e2414597ededce439638fb9b7c57b5054820649e99bad067bc6923edb28819fd3e42c2df3fb2e348bdae5b06ac3c31444cdca406e493857d30b1f1bf39dbb5db7f99b0d282604c2a881c3e18f9ed244f73581a41f4987d8b9f85e8b1e0134b514a5e2161d02a259d74b5575f65f6994f6f4c241ec036918d25afba08ce022383b0e26b11f6122e7fb8539247b838b73e1def7498a674", 0xc0}, {&(0x7f0000000400)="ea9997c57caddc1edd126be754032b89dd495997b0ce9fe834b7ffb5a1e2bc729d6f245327d8bc7d099b9ae925d725c1e3547cb7553a843067a4371aba2bcefb95490849e4c87fd3afa98a4980b253e699d54020e7061f7133c476fd3a76c89ee748c2a249fb", 0x66}, {&(0x7f0000000480)="83cba98296f4a00bd3f1ad55c4f44604d3c332c279e0a0c81c6ab1d9798f92a87451f92f11a972cc9a", 0x29}, {0x0}], 0x6, &(0x7f0000000540)=[{0x110, 0x0, 0x101, "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"}, {0xc8, 0x10f, 0x4, "290ed9b994c9a30ca943e74c34fece5fd50a2565d1126e57308be0ce74aeca0df3187f83499f1a94fe102de0c23deb7d14777775bc6e07ad615456d388c855a3b45831ec91817f0ce058b4e40c7fbfb7f4b686656d4eaa3c25d6b4dd212e8a9e3883b956c70bda39fec2f2d107f737b983b09b6c192d2b41e348a9a846eba18e4a26d9549a9bcf2aa90bbd6b35f1e6788d2e14669d1212469deeb0d92ad564ace818210b4f4134424750d5bc31066dd7ddf6df1e"}], 0x1d8}, 0x3}, {{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000740)="56394c36d00294892fe367b84bcb39a9354071402f0c64da9df6046af9ff8e4df91cc8d83936e68ef2e30e7ad9fdcca17ad18705cc", 0x35}, {&(0x7f0000000780)="95183b6ec495be490f", 0x9}, {&(0x7f00000007c0)="8ad3983be7ce585c1c55c64617ac57720a45abbd4d6fb52cdadbed40d2c00d2acf1aacd5e6328af305c16e3cca35bfcc920e15f1136b8d2d22d7528fd8acfa8e50eb5259219ef0fa0c47a5c4c8a6dffa8050134bcf0e33209defe3410c1f33c8a5588e2d91474eb0b32bac93a44b68b684380cbd70309677c8c79998592718fb2fc7b1e74fcdb36d13c3a3e3f3bd8ef26b7e2fa09695580fe78c392cacc149161cca6007b588ae4f87c225b014fa41ee6cd4cb474b5eb78db8480a39a90a26f7c5ae287698947851a15be2f41a867a526120ad9f72031045c78df6a9676031542e5fb3998179785edc7ad1f37dd987950a8bf6902fce4bc645f4d10cb9f503c97d75e82e670f39a9a91ca29ffe95572f2cdf4a7cedfe376723281ae1643104a759dc4806d892908ffa43818e5055bfbee0f66859c9a6e0b9c410f2377aeb3ac49eecfba4e3007dcf05d210663a7230aeb6580fa9b443447d226b168f79f1b5b9b3151ab65879521a6dd2eeb2a1e129582d766bfc85c2d32f7e28d977a19864e739ced726526f40c3578a0585166e9e9071eb35b994b12109409b8cf987a815c0defd00aeac77ed0df3f40cf9e3a177cf7b8a190a44db5e632da8f0b04f4d7efa4434e0a5814921aa5ebf4042f22cbbc164dedb53b77bdd21fae847838365ad53a6fbbb7dca1b0eceb0fd7fdc22f48f46bbcb71c6df1e682938075035a065f1a9a15acd2bd3771e218276fa3ee396ece2e814fb5f23adde5e416f52f9d84bcb2832c069796055b682325dd14f22d57133b4beb6e5fcddfd8a8f88917bab192df8f4c7855a3dd820b9b691b16d0802f0064843f591bc1f6e4265c41c20bc07f2ba814f94f6770da061d2e8b22e3bd063c0ff5ed367250da52cf65a12c072ae0cf973da4c512f0fb5d8f0ec64a4ad6165f6f64fc0eb92df9c639baa19de3110fcef7bc345575785ab2e50e66054a066a29610f149cfbddf978bfcd736181916691d2709b8aa52928b128ed93c95fcb703023351f250d517c0e972f75899690b27ea8916c52b216be9f0e59ecc3b40125719d2d69c5212222bf65aea292b9d6b0bac101bd3274e8e6ef0eb5eb76430e1545e7e6ca118898b04d7698dafa449098eb191118b94f49bff80ba24636d80539d2d48df60db7d719a7e10290638b0532a9f936857385f753bd905617c0e5432ae3884ea58b529889e65ae879d6a620bcc6e7c31715da0f5c8185e08641bb513371f99cccc81f5ae74c389edca165f3f78bd9c4764acf9b69d9f7077e96315326cedf0db3316f710c87ae8e323de8fe72603e2f1f3a4ec10afa236ab11545061beb3478a6dfa9b9c02ce9a6775d946552055ac2aa8a14810fa055deb8ad7fa436f979393063d6d25c20a3a6751de2d609f3cd10a7745bf16db1874777d6e07089b99d6bfcf5adc42752a8c729753e355d23616d38548c900301fea66e40dcc153b863729251702acf19b99dc0e07b1aedc99935e122362ab366397a9cfa2d004cbf2906c644210d2bdfa6801a7e7d22ea74429045d2af68c3f4b7b8f06282d4099e66b052e3756c79e74e055971c7446db4f9252152b2d48a920dca9c680014feeb4827791940a7f540a87b1023d66813c69df02462cd7ab31a7205b3dececd1732c7b532c6189f6402c2801f3947c432b61b4753670ee17c97f0c9a502ce180ee6e47d882afc35b52156752cbcd5b431c4002db81e5083cfed5b74c95b1a9a9161fb47f92ceaeee3cf0606facfd85073ce271dfe4364d23feb2f69e0cfe3f9357958c92f60a245c7a76c28d56ae7f04f7165d1c1627e08871c610ecc737ba86ece32860a24328618b2cf7207ffd2436326390efd478aa8ebe7f74d5710abeb4b10fea86afe73a2394a85aef4339adf8ef5409569886adf9c3a398343de7fa2a47791ac5576f4d21829935a5baa49439ecaa013e2c7cc5c5b78ad298b9c7fec8a559bc346b9fb7321f13ae8b4d0f8a8f017fc60d0c85300a000f2eeb1e829004ae854940dec49d712941d12794ed4016710794d38c8cd6c5d0458da51047c72b7cb04b0d2b5ff98d7d7707a904b338adee6a9fb83523a58b73b11dcb6e81e19262b50dce5d76947dff88c38162f4f12267b366192b8b844c8ead6849d3c22ff1f42cbea4f6db46169ee6951a7d9ce5669639877f36e21ad4ffb022d4e2a6103eb73fa1ca17b2c3e3560b2d86c60d8cdadb980ed001eb532266e81881f77a4094cdc6f6972d429e6c98f8e7c5b49f6b5df1831a62cb6ffe163c0820d85e4a424991c613d8b074c923244f152f88203dcc605e4ca00e206f7d416c001ab287b9cfc023d427562f28b7605066e19f6b75da6139b8ce58ce4aed95b6bc7e2e1d14558291ec2b501c57ee046810d5d3f1b03749d889a66bd450dcbca4d0d750c12edafcdc0cc30be353753ab19b25c1848ea27b0f02613959a8a2ae5a20cd290602266271e2304d40a3fa96fb621f08d4021dfb41b854fa3421c62520e3006e4ec5654ee306937ab582c578b7ae5bdd4f055a52a9a2f415e5f31095aa81e6475e1cd4d4de120a2ffa3d6ce96703eea13de92c7eb91b23b01feec2b80e57c23870b7a3f99018a09eb0d98f12c758c47e7c817d773fa6dacd7b659c1e8f97f3c4f432c2f37e15106cf0cc788dff967686dd4e395feee22aff90fd3ae9343cdd6642a629b088beefe33682faaa388d8017d7bdec335013a89f00bde736d526d7ec5e2027ea4cbf67b692f1df96f0a6ffb7dc1603aa8be784b1fe161a919c9d4dbdcd1bf8b0649de015b8f6d276f2498b7be5fb1b84fe1b383fd1a80bff0c4a54ecbf4c34fc37446e01f08bc7b65ce66eddb49503a6287feeb67e4ba309c4e781a299d9b0a24582971998a64b07f64877eeaf65366ce3b6921f517b530b065cbfa3a47a820a9eb7ce530e7271889d5386997f0c0b3f7497482dd486b11e0633716f82d04be28c87799a459cee4a7c90bab62a921e5660a9432c23fc673c7b102b87ad6e76a935e49cb514910383b4aa1490aa5ac9fc7afd4bf387c4cb29b0d3781d971b067901b9faddc373544516bb03eaf31c82c2bf59c0da3658e9e3c3b984fa586b8bb229e841eb3d6c56df1e9bdb7657bb12aa04ae8ad7b4a92de7b7c8044afa25a7c9be6498f97a213a6aa7cb256efa9a7c56fd04ab018536373f770dfc1335b5bb3f582571686788085c65eee9c0629aae6db5059c3c4cde207e73db148bf10918959353d00b0e6c4f0c199aba7253d022892bebed6c697563efd8cd99391d89621378a6c27573c6b504a62c1e433147f5910d00f027fbb121cba96b7d8c9ba56f7c21a5e589d1ce1cad80263c4671a0cc8d9be182adbb0bc10f2d7dfe097c8fe1025cf324f9afe9751eebd6ee7a8c08c1204b29f981a92427ae049af173ad7e2fa70e852c4631f3ad332c9e74b607c49abf94246a19cb852c629dd8f473a1961513da5ff771b4c66bb03b8838017cd5e2ca5803b6bc50da8be676125fcfa91aaf90bf151a7aa32d372d7e2d4fe199348596ace96429f6b40a6fa784326815244b0515ede8e2847fe170ccf725d3d121e80b5201c571254ebfde833dda48e08984fa2c1dbb2f2e2b7511247392f1a1f5b4a47d1804ce2128feecaa6757878e4c8187260c00a6623cec553964497e34380e602eb1e5931d7fc6c14efb18de8f65442dd57b02e1b2c3677eb1174831229f4c97fc105c63d475d7e09401c9d51f2242111032fa1a540713b857a56cae6fb2fbc4b9ef12757402f47c7baa7a93f50f1360d71a7d08f41aacc4018a34707fb8bda33e56b201cce212b4679d0ef78653a626470ebfafb6bacfa9f2588f1e05c0ec76bc1e8c1b6e1b02e6c1660fe66ff37f18aef4b9ca4e545d3f908ba2092972162a8d0b09a13f6f56e700f64be6fc9fad8750a6c6279c4afa212baa6f258497e70a5ed5c71e3a6d63a42950f27d3f5dd311f494ec03de7c2edd795eb43104f23389a8b7f470d85c132cd928bd8d1649be720815117ff05c93a6b8d0d651220aa27f8bd20e86dd9a7b636235787e33ef776786a0194d1b26db2caf38bc7a783ed3f93271b84ebfd341da59c6a23a3b3b35dfebcc1c6ad02481f17a4e741da642ab6efcfd9f6490b7f6ec86f0df8937d1c6746b7b65863c29079ba899edabdbeba02061c84179b916e6552f7f17d016ee35df4923e084cfe88f92dba3e4809752e04208c9bc7abb78c9fd26f1610cade6c24969e0183b04e43aeebdafe19cee3113cb42a87662ee750261da82fe4f88581924afba513a95eca2838675ac52aa965f42abbabf92adc9ac98fa1f1d10bc9aabc16a56467be4a61e9e2c61526f5322272c15aa513ddd6962a5f0d82e5d4cb382f39fc332979d1089915a280957c19cdf6b5c6c3e0833fbcb3a2bea38eb766d0fb76c73b49205be0b475b870949a01cfbc9684c123f9cdb045f698a819c04fd38ff17eea0e67a35e5664decb7442ff0dfb2f7f09b3e93cf102c59d1d6026927c9d27bfda402a07c0d2f51cf6f14c14532f526510e830502eb5597c1777d111f19769b63a9f43d2194976c78b03970638631f0a587b4f9a7c82394a47903a3d964f17502e41082ce3021a3929fd0bea9ab7b397c568c3ef961b5993742d7ab0191ebe5bfb06b7d9b3a04ec0ff27e0845fc587b62bb1d1da7a10a21946c33a551bda6506a6a764c7c739ff0893d23d1a81067e0f671b597e78cdf053c47c262d33ad621cf749f923aa8f33093e258cf62dd10fea8657106f4f78987a50f05f66e232f112294db522e1cf7e59a10bc835d776e8d3492ef00696334984e0548a7732ef05e5550f0bccab97dbd1ebc858f3886e1b60b5e79428d61be8e0b79ce8dee62e8c7096f8b9a2676c8fc3023f80d0ca655a58983819c1cdf6f65c94ea30438acb9953f9e2aa9e02f9b8e533cf0bbe4194be753b269c87ffbee5e0fb2ec74a54272fe0c0f58d87b99437209c21f464f4861ef146774c778bab612821bd6a1851d16f69e0292b64595094e87e31dc34b21f3b326396a8163f0698303df096d3d24457c5be68b06ac3a7cae051503858694c5700ce525ee167a99905195eb0a94f27a48f8327699d2d64a8ee7d836f3759e7c7e97326315949c83752fe36ab0e9878ccb50e2fb5da9777efe34f8ba9c55b1cfead1b441a5ffc6161603abcc572e1fe1c4d4b076951e079096eabd596ace9f439aaf932d591f70a956ec7b0838122b25a5e8a2fc89cb1ebbe798623a6a6d59be540611a3876661a1b2341b9a661dc413c95a1c893fa7633bf76e13eebfff021505a77f3b05ae4099250ff040edf4e4303a883a2c9eade549db1553e1dc54573a62994aa227e8a8f215490b2b471022c35e931607f0d4a80c868196dd1cd47a446805210795a29b2dcbc605f53ddcc2bd565d1b768b16fb5de1343c4f6cf46f14ea0410e033ced0cf212709b8ddea7709c8551d67f31e371e2c30215494b60f2bf69e857070fa876f81d1be83378561833c2f02affe4f99889268adebafad4202ee876effa3feb398136a679d0b59fc013a544701be189fb6a054267c75679600d83689475e21fe0dccdead1f2ca5a5c1120f4f25680212a03d38444b6a16222acd0a59a9f08154a661f69e59a98e9d6ae1e9e164d1a35d463bc2f09ff7de8b51475b491cf2a3dcfc89fdb6ba62edf0606b55983b06bf2cfeb7e1947f7973d59a3c98017cb9ff6c735554e4e1cf3f3c1e43d225e5c89eb1a42238411937ed65c74ce215b323d0440dd5d4249a15c98d0f830730cbe8c43e298007b6c1da5728a911", 0x1000}, {&(0x7f00000017c0)="f58705596d9420b1f4af666e21f95ce85ccc1243d8e3474f08264b661e2fc9e4e0aed549a04807c3dab2cc06caf8313cb50604d6f665ef82cf597815aa75998412efb91c8c72721b29d4f2be5ed51374acde7b619e286eed249f1e6d0e2079361739b13007363f311067e1def90bad2219346c8df4a415a095ca222458447364ba048688d020a3f535f1a2ee7bb006b75268ff53da59b03aaf5a5d873c962a866497ba7449e78f48ce17c05026f7d2de3bfa3373e74756218902318a10fe83f25a766882ea33e9cd91a5997b83de948b47d8bb530cb78f4e4f29fe91245576ac4c293f", 0xe3}, {&(0x7f00000018c0)="d2a837fb002e21696c555b870c3c7be8c3e49a17df93b70342367a285d63397048a3b5be8862324b346591dbd1e06fc175fc054beac9076b9c84d104bf27", 0x3e}, {&(0x7f0000001900)="8e602ae9aafa3437bab988ba5bca", 0xe}, {&(0x7f0000001940)="9754f6350cec00c6df5033cf9cfc5a2d5e9117cf72c6ec249b0e4d9b50c9c1df0f99e9", 0x23}, {&(0x7f0000001980)="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", 0x1000}], 0x8, &(0x7f0000002a00)=[{0x1010, 0x10b, 0x80000001, "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"}, {0x20, 0x110, 0x6, "f5f2a81adff891ada8f54c9eb741d4"}], 0x1030}, 0x6}], 0x2, 0x0) ustat(0xc8, &(0x7f00000000c0)) 03:38:44 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xff) getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x269a9cc177dab10b) fcntl$addseals(r0, 0x409, 0x9) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xf200000000000000, 0x40000) 03:38:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="0adc1f023c123f3188a070") socket$inet(0x10, 0x2, 0x0) 03:38:44 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:44 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f00000000c0)={r1, 0x1}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$P9_RLERRORu(r0, &(0x7f0000000100)={0x17, 0x7, 0x2, {{0xa, '/dev/zero\x00'}, 0x4}}, 0x17) write$P9_RWALK(r0, &(0x7f0000000140)={0x3d, 0x6f, 0x2, {0x4, [{0x0, 0x2, 0x1}, {0xa, 0x4, 0x6}, {0xc0, 0xfffffffffffffffa, 0x2}, {0x84, 0x0, 0x2}]}}, 0x3d) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) close(r0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) write$P9_RATTACH(r0, &(0x7f0000000280)={0x14, 0x69, 0x2, {0x6c, 0x2, 0x2}}, 0x14) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000002c0)={0x7, 0x0, 0xf6ea, 0x4, 0x9, 0x0, 0x7ff, 0x3, 0x3, 0x401, 0x0, 0x100000001}) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000300)={0x5, 0x7, "ad9417c3770eaf2187fb0492e56271b3da3764a32ac44c2f85ffe7bd3e769d05", 0x5ab8, 0xffffffff, 0x7c3, 0x4, 0x101}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000380)={0xff, 0x1}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000003c0)) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000400)={0xfdd, 0x68, 0xfffffffffffffffc, 0x546, 0x6}) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000440)=0x42) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000480)={0x400, 0x3}) poll(&(0x7f00000004c0)=[{r3, 0x20}], 0x1, 0x1) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000500)={0x9, 0x7}) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getpeername$packet(r4, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000680)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000006c0)={'vcan0\x00', r6}) accept4$packet(r4, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14, 0x80000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000000780), &(0x7f00000007c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000800)={0x81, 0xffffffff, 0x1}) ioctl$VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f00000009c0)={0x0, @win={{0x5, 0x1000, 0x20000000000000, 0x4}, 0xf, 0x9, &(0x7f0000000900)={{0x3, 0x80, 0x8, 0x7}, &(0x7f00000008c0)={{0x0, 0x2b2c, 0xce66, 0xffffffffffffffe0}, &(0x7f0000000880)={{0x60000, 0x6, 0x4, 0xff}}}}, 0x4, &(0x7f0000000940)="c3d26e562722c9b83e1d043101cddabc5c663be0438838fd10e7be6136203143c9e49f7a9eab33ac53f0754a5616209e5ac81e4229d8dbaeed350978175e7d0d75fe", 0x211}}) 03:38:45 executing program 2: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x200, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x10) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400000) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x18) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280)="98ac76269e56c75bf7db4d3d8b3551903e922f9654e5d62651a652359d78cedeebcccf76686e542bcb912010e1f87e1ccea4d8218f70448f0daf55c80c0d53eeb7eb53492ef0a70cbb6ef7c463e2e494901a135fe680e14969b1f5926ed8416bd5bcd2140d01c6f4b09b2533f5b7cb8be4f9ab2886a7b26027be9203e0db5c2c72e07cb75f897e37493d72959a7c8d0359a1819fb6eff6d5df70557a23bab731211edf120a7c55980d4c89ed108f5ef5b316c1f556d53c2d6653408bba71fb78bf03c6ecc3f6746f2a1f16d269817d113697d610545f2247099f331034c0e8fb640fb47619dd3263aeba7f95f04dd3cb16dddca40f105e0c9016c2a2c7ba15bc2d85e8067c1fe580e3f674a0137334bc813a7263c4902fdea3ad709057cfa52b1b19c70704efcc1db33ebe88ac9d55765022f7b51d8c3aad7f55663720730d2b3fc2b5872ad39de0c87ebc6ad7e9d8e73e563379e9c58afce7ec90636b0811940cac19b840e08b70bba9e9c2242cbbed6dfbf9ac62b51a6d2126e8aabb43873664521b41f0361975fdcbcf868a57515c4d486036ab4addc8a998bafc9fdfef6aa60fed033428e1cd26d5d0282a8af46479bdff02cc3f4de0e756277fe381d66510d20cf21f2ccb649b971237a1f75a05056185467c4c753709fd153473e2cb9d13c64d8ddfe5e31c6321993c7e435a5b59d8641d1290192e07860203afcf694b9bd46e92487893ed0fbbc9c5083d61b25b1c6fe4583c6dbcf1c01d9d008032fe898001d61771d2a36358c0fefbc641797038d32c163e191c8f684412b6a9cedb7e416349565433adecbb8ede40b39145c280929bcdebe7c74e5dd72606afda7094b57dd2cfb12082d7352a1b99bc9850263c436d9e1607dc170ede863af20aa7ba3c72611ab7e1e6fe4236c9a33a6056da3c74aab235c627245293dc94dd460848a1928e2753579837a15c1ede83737f85b96ed38316724a7e1b683e006cf6ca204cd10c049333fd7b0c891d36ae0cbb5ebcfa9299d28df2222d9af212fe24cce68119e4d0fb84bf757b92afb000e5253e9565037dd5bac38cb99bbcf636747b7939ea6f9a6728277a917313920dc51d615dc9c46784a6f9404f46843604b521b6210932dbccab97db0792871f7d9268956091563539b9dc439769f5bee4c2a58825afec0948a2c8d70efe345f8a74e5b85ae6735ab460c4c4af5e56985670bfcbaa870ebbb36bcabec3fdeb9a3a6b5bab07194163ff8fc42f48c581eb3ee8b46aed43475c6a33bb1bd6978b2490695bc9b1f290ed5565603b6479573db066a0188fc49e7e4f158ea6e1bd6bc66cc5855e7c1a7b54b14f3f85c704c727f018802b9e71aeb40e872ef467dd8c6abc5963c519f834c21e00552364b64560bee4700e79feebc9b3478abdf2b3244a635b711546b8c42fadc42e573078328f9f6b8b342c989a2c5ea3e1985ce1c547eb9aee38793bb7aee7480f7da21056946972d5f06e4fe9f032e841915287e87b9109ba833b67857f5104b595f03c0569eb1aa52ee2ed703b19551cfddcd3e839193f1c7eed42c17d2377a94eda12ad04c9d510b926ed2eebeda16f7f8d746793fa08cbdb3a8fdf4a286f5c8adb60fe6ccc38f4dcacdd30b335a3f31cf046c1482cb859ed3d1a5a867687c22360e94e35f26be79d2dfa48e42102511cca42ba0acff62820aa2b928a651763ec7e07c31aa0dd593adc4fea2c74332775afe39d84c0403ebd6e0b10c4bbeb9e3dd3ee187f756414a0387a12eba404fe975a2e5a7fc114bfad8224b0218fdb6bdd51ce4802906ca312a7d5df178646fbd0b34f57b6031ff145a2ff1bb09ea921fc009ae2313db5bb3a09853f4ae2e4c41c07bf4604a025d191eb00e9bb7d240b6f2b4599e79f5df03c9c1f388104107a3028a0ec064f10593a93e66b45f6dce2d69899ca1eae94b955695cdc29a54af23bc1eda5bac9e6366e82ea54b392e7e1bfc611aa6b491bbeece46c6bacf6c04a641c63807bfe34ce556d03136a6c12e68a86e605a50ad1417e9c2a23a3293e5ed1229548d8a9d7244283a055fc45e5c6007b20db107b8ec2d3a7b9e645f52fd526e96aa1fe85fc8860531db2e9bc38636f3a31cedc6c75ab2c01b6687af8770775d45e12a9e9d12dc592c868685004406311b16b0be6612d4f7220a2ff371e814c9abd94b4c815cb202d23299166c6cbc3d47b7647ce844a8fb751b42a37cd9e89da8d059f8ba17bd4333e485e4b370828d34c2005e910334a8fd6ca9d0208e2fd225090fd42117337f5604fe5453267aba95a2f8c72da4585d32e12cae8d7743eb75ee0b6b99dcd3290200bc372b5c8944b18810f2d9fd6a4bd6bdb869bd3783446ae8d3c75049efa546aecbcb1ab563ba022cc6b96a462b143dd3e2cc0890fc35e6e1f1ee5264f2ec05ea7471ad38c39e4cf9912adba914a2fb18c429db5645474e2b4d519466afc6387040fb552bab087e7d66e377ad8353e83d1e88db05553b5fc79fa94c662e8475b3dde01bb9b675e22930514d06e5bc0daad896aa1210ba6ccbc3b010e82d87a04ab07169b0a00545ed735912250a76f17509ec58d3b7ba672ff37880d41b99bc7167016d60a7178f30d7b039f41b34f4629ec634acf63572dcce219a8bdb56f3ff859786de634cc6a532169e5241b0dd477d52b40021bfa001133ab6320e885eedeb1730ad475d99a901d6c74d8d7b8d06beda836d1cf54921d2234fe30c1a5a72759aba742a37ae0952d9a65403a1a8cebf0cc2bdc7edc8d291c7cf0dff698ae233508a25fa85c298dceb39e7bb88b9c874c920c0e4e26898a63f9e428143583641e2a7f752a661f4efdf1d8334f69cf33facfffb7d7130863d5a206cf453852ee3dfa733bdb39bba184ccd544fe126afe661c608cbdfca7fa3ddd3812f1fc15d6f36e31a29c2b81dc38cac3e22a916149a137ebc2f46af65d5d311982a3c521000cd728fd76ad744f6cac3339426f03410ee71d4cded08b9cf64c3165d37cb7ae7af1a3ade015c338b24346f72fd6113f2f78faba81f1611f1b363405513e3766de9cf703d7967047dfb7f6f3d7393a19167f1194ae03de391cbee7490b15002eb625b15fa41b759706326749c098704429628ea465f40addd73e0d9c359b6972302234d785d90b1a9bf6c276b224aa780b0c7de017073ce0466c80d10cd99660f9025aa15a66a898b702d089e680110a00f2a2b4bcd9f35bc30190d288ba558be5a5253b58f9e073f97905b71223777eaec609369a4a59d987ab1c04055cbab21839a999718d96b9a8f86e8341a3885874a8d386167fe057f67e34c046b19570fff3f29c49db406494d8094fc12796098dbd2c7bb372266fe4320e1b809dade143c98285aa016391b1c7ba8c25ae2a40191b13af54acd2fe3ac0c51e7234811956ca82fa0fe0c996b03d87db75688fd52b6cd773aa4a95a7cfecf8af8e9e50aa2fed89820da211593dbc009b98523fed9100f414b6d1e758b1aff01db80091c9bc9748c271d0472b47bd6228aa0a123f9e71254fd185ea3fc5ff17aafca1035ceb16e0f3b9b1975a4cbb445789dc44840930d32af6ec84caccb633922e8da76bb6a735462e9c6f21f52942cbec14a645581181a417e522fcf0ea58fb4fc146ac875026b192c3d7278d2627d58fa1e407442548f8c0fa17fab38c2083b9c508a782f41efeec35cddd48ceb2842915e5903fffabc9b0513f16079aa74f871315d30301f808b46e14ab3bb9770c2eeb9c13fea3563f8252fca16ee9d9ac883b851eaf4bbdafdad5890ac8fea3f0b0d37e2351428d7664053d27c7cac02ba096699cac53694e201e99025402263b1f91e05f914d396852983e07a56e21d3184f00b9df35aed52a790a999bf7a720f4ca40c141b752cab4d2ef63627cc3b467e170f1db9575fce542cdcaf6bcf2eee436ba1adbfdaa8ff798ebb3183404506d8a0bfba9ba8f77466c848afd34fff42b9ed1d0cd444c9a3b387a475f03c678665587d7688ce8067e2300bef3b3600b20fa3952b905313db9cfa31e930df733ae2602de099fc6a25f6893cffc83150603cbcf099a25a8dad7e09191dfd9a13a3e7fa1ca35653a04c390c5388f0c52ba72ff92c49a0d3892520e489c5657be7c69e89eb54da83dc7cc180ba499dd6d1b501193fac782d1d42fba2d8088fdbeeaa246437d1643ded652a56ad1ffd119815237a0f759d9ce1cc1478e7d34621ea7d8cc73242814d3e469b629efcf60fb478143901ad5f2e40281fc77445a6116195476e3968cc4b261aa7d68a0a1e957381cf6b69c5db3091f477be99cb7ef6c808d35e0ea086480b73208f1286f18d09ca2ac789dfb9dcf45492dc4353aee52b8f4bc688e681607bd6a8364c104c22c7082799425488ddbb98c6962c5be0a5e5cac245725689af9ebef5029f0dad8658110f3ab0b0edcc9bd8fe333608630164493ab3686b0cf6cd776470186ba22a48d4fe4c4f9dcb70a52eae68db623e807a17cb8ac1914c1bfcb562935d5c27d2d4e1d4df0e2da96a0fdc2e412bf30ba6027e058b916eee580bd09fd98754f3b81e8ff87d6837cc20d8e2891bb716ca720a195680ba4f951e2838bd5f3c937ab6e4c9375e071c87f535536655898d9a80d848207613f6593a2bfd80b064043fe52c6edd29935d8193a1667e7a5306a6114f8cf869263efc601293ee17d3d9fde2a8b126e94723842cdd3507010979791ece8eca36557d3aa72f9bf53c7602ce10e4682347eaa45bae0bc8f5ae6c63dc8779351f36a70bbbe8ac0fb59335982b0f84393673e32231329f083db044224de28d20c1bee54c69d530f29136e3194852441e3657b04cafd69a710f18e618a819a0be3d6bb2c85c4be8875eaa4806983f3289cb50a651f46ff789afa48c9e3bab1db74202cf982a138006655b30f4345c064f2b061533b97bf589e9b8e784ff075bf67a0520be9b7c6d01feeca4b7dbe6192a0272da6b131e43491d3714921f527d835322a2e1a0546206e420af17547c45d96150128c23667d17a058b8f3d01e8f40c3050b079b7f08dbcd2b9a40183e367306f7deb3dbee3c271cc5fb2a0bd8603588592bd860b2636897a60dff893d86e2b7cbd3a4ab8adf4f5379722c143fb63bd66ca0a6ff71c8b39f8fa87b095009489088fc723c4ddd13ce5f6eb48ee31867874524697a3cb5cf87504745bf47bcb7e84b9eaf295e39d3ded48a81fe73e18fe4bf3e41ad2bbd42a74b39323b6f11d8578fb04b9607d4af1d8b0638bc8e0a04cf3db72ff1831eec9c3ea22a2483bc1ce202b3ad64b5ec7e39ab6393f5989540f29361223a76e36a09f21499af47ec4a42b992ec2f309b0b6ada4ed338560de4b4d41426771fc3a5ec7a934c74e444525261504c4bb03090480013aacd66ea5b54f2cef0d43f471ce137bdacabeeae87be2b4cc728645181e7843264b222578d03b13763d1f426e986495965d0f0a1a7839f75a3cda615d9ce2123a8805175a758cbc22cdec778500fc77db21140ae836569ca323aa0e8373de2964e9c58ecf1a1c6b7e8e24ee1bb2b92395c9727a43f40ce68a8965761bcc090d9b0547dd686ee3dc8c95658fa2f0054e758a2d2dc14d7cf6399efb8e4b2f103bf15b9a494310efe8b6c2442179a425313214840b74078a26fe862909b5cacd050e01ca1a48ddbd74f2d82a5b87db51cb4abf649a6cba8b2d010f8c4e7f272e00accb34ff619a60581ff3817c7f9b5b2d0e7127adfd9355b2608866e99634a6918cee782ab866521f97a5fdbb6a5eb89044806d3a61", 0x1000, r0}, 0x68) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x20) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000140)=0x5fd, 0x4) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg(r3, &(0x7f0000000d00), 0x400004e, 0x0) [ 759.700187][ T8121] QAT: Invalid ioctl [ 759.736810][ T8159] QAT: Invalid ioctl 03:38:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:45 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x4, &(0x7f0000000480)=[{&(0x7f0000000100)="a0d3b0986e227dfa7ae72e8481d82326cb929f8b8ba54e1848aa194c05a928f434563979d9754fbd0990405d0baf4417d6f4d5", 0x33, 0x7fff}, {&(0x7f0000000140)="30ef07f5ca8f2d5abfb9d4b08e49c8d4789a75fd2527fb5f6275ea1887ca3c9419c638d15cee6dcd410391fefbd31c777bee43c4c18dd3461d2c23fc5f5910430e1336d88299b8c77d238ca8fe731c4e6cd56d738a20108c15c78ab77dd5da7db36769edf95ceca92befee659864ae5a2e2aa0a3af704f5836b4f94bae51cb87b6b6b1397f636d101798992f477c54ab6110b677413b4410414d15b68e345d7b4576", 0xa2, 0x80000001}, {&(0x7f0000000200)="3f5896a88b3021baef7ebdd92e08243d345675dcb803f20af1bd84b177ff9a1ec3c4af9ed27abe712dc19da6744d4b6504719d64fce00df1fde20c78dcd670a94e36a563523310c7581591b411a6cf671142e67a09aa458ab6dcac7a4d6bea896423441e60735698d64c883affc5425bb97fc9655a8cf2d1efd93aa3f18cf2c2909fee6d730932c32a67ab0396ed7a0e3a821a672db6ea", 0x97, 0x4}, {&(0x7f0000000380)="2536f344c63633fc28c84ed1671749b7890f51a94647ac0e3e2d9ab19db19494475996c3270a2a4deb6ee80aca9faf7c9a461688611ced78325ca270892cabbf71943dd4e74fdb6f7417e85ab1a736f4b61237da7b29a89bd75b0d8d61da9fd860903e8e6ae24bb0", 0x68}], 0x80014, &(0x7f0000000500)={[{@numtail='nonumtail=0'}, {@uni_xlate='uni_xlate=1'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}], [{@fsname={'fsname', 0x3d, '/dev/vbi#\x00'}}]}) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000080)={0xef, "0eba9490fa52d61e94f28f5ed65cdc7c64378b6af180a9ed2ce00987d1feb0ab", 0x1}) [ 759.948516][ T8204] binder: 8203:8204 got reply transaction with no transaction stack [ 760.066536][ T8204] binder: 8203:8204 transaction failed 29201/-71, size 0-0 line 2899 03:38:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) set_mempolicy(0x3, &(0x7f0000000040)=0x800, 0x7) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:45 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1e2e) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff31) socket$kcm(0x29, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)=""/220, 0xdc}], 0x1, &(0x7f0000000740)=""/229, 0xe5}, 0x10162) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80}, 0x20000054) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0xffffffffffffffd5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0xfffffffffffffffa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000d80)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 03:38:45 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x400003, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000001780)='vmnet1,bdetx\xb4\xa6*pd\xacself\'em1\x00}\xdc\x90\x17\x90\xfa\x89c6\xdc#\x85[t \x10\x11\x1a\xc1\a\x00\r\xbc\xeaE\xcdG\xa1\xe5\xb7\x05\xdc`E\xf9\xe7\xd8\x01\x04\x00\x00\x00\x00\x00\x00\xd6\x01\xdb\xf1\xdc\"\x10RD\xaa\xe5\x17XC\xc2\xf1\x89\x88G\xa2\xa0\xf3\xbb\xd9\\>R\xb1\x14F\xa9\xeb\xba\t\xc5\x01\'j)\x189;\xf2\xc4U\x1f\x14m\xd8\x85\x10$\xb1\xd7\xf7P(4\xc0\xcc\xd6\tr\x7f\xc0S\xdd\xf8\xbe\xb5w\x9f\x9c)F\xf2$\xfe\xdc\v\xc0`M\x13\xef\x96b\xfd;\xfa\xf4>T\xc0\x81\xc0s;dD\xc9\x1akr\x94?\xdd\xdd\xd0\"\xf9\x80-\xad!\xe2\xed=3\xe2\xb12\r\xac#c\xb7uN0\x04\xa5\xe4w\x9d\xa6v\xdeU&\xc8T\xcb\xf3\x9f\xaaN\xbc\xf3\xba\xfe\x15vL\xb0\nZ\xf7GH\xb4\xb1\xd1\x81\x03\x89 t[\x8e', 0x2) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r5 = geteuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001680)=@broute={'broute\x00', 0x20, 0x3, 0xe10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840], 0x0, &(0x7f00000005c0), &(0x7f0000000840)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000005d000000000076657468305f746f5f7465616d0000007465616d3000000000000000000000006272696467655f736c6176655f310000697036746e6c30000000000000000000aaaaaaaaaaaaffff000000ffaaaaaaaaaabb000000ffff000000e800000090010000c00100006f776e65720000000000000000000000000000000000000000000000000000001800000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"]}, 0xe88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x3, 0x800) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) 03:38:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xa30000, 0xa30000}, 0xfffffffffffffffd}, 0x20, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f00000001c0)="1d72fc2c2febf6134353c9c7e1476c0ed4860c26d4bbb41be187c0e767a0d774e95ad984076db49f951302438cc70f34d536245a1bf353fe6729effd32cc125276f8c4da97122001628c83917e5b419b9b45f03c1b8bc7924ef8de6f9f0ecdc351923c40042244", 0x67, 0xfffffffffffffff8) keyctl$revoke(0x3, r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffffe2, 0x0, 0x0, 0x0) [ 760.107488][ T8204] binder: 8203:8204 got reply transaction with no transaction stack [ 760.120412][ T3754] binder: undelivered TRANSACTION_ERROR: 29201 [ 760.131587][ T8204] binder: 8203:8204 transaction failed 29201/-71, size 0-0 line 2899 03:38:45 executing program 1: r0 = socket(0x0, 0x5, 0x9) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x2, {0x9c410, 0xffffffff80000001, 0x10000000004, 0x1, 0x3be, 0x813}, 0x2, 0x9}, 0xe) write(r0, &(0x7f0000000000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000040)="1f0000000104eb11f23b54c007110009f30501000b00034000000000050000", 0x1f) [ 760.232122][ T3754] binder: undelivered TRANSACTION_ERROR: 29201 03:38:45 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 760.328918][ T8218] device lo entered promiscuous mode 03:38:45 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000240)='/dev/radio#\x00', 0x2, 0x2) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000280)=""/167) socket$kcm(0x29, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20040, 0x80) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000200)={0x3, 0x9c3, 0xac}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x40, 0x1f, 0x81}, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="bf160000000000004061000000000000616200000000000085100000010000009500000000000000bf100000000000000f200000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 03:38:46 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0x80000001, 0x3}}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x42, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000140)=[{{0x0, 0x2710}, 0x0, 0x3, 0x7}, {{0x0, 0x2710}, 0x17, 0x9, 0x3}, {{r2, r3/1000+30000}, 0x1f, 0x8, 0x401}, {{0x77359400}, 0x15, 0xfffffffffffffffc, 0x2}, {{r4, r5/1000+10000}, 0x16, 0x8, 0xffffffffa1d3e6fb}, {{0x77359400}, 0x5, 0xffffffff, 0x2}, {{}, 0x1f, 0x8, 0x9}, {{}, 0x1f, 0x6, 0x2}, {{0x77359400}, 0x7, 0x6, 0x4c6}, {{}, 0x16, 0x1, 0x400}], 0xf0) 03:38:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x15, 0x40000000000007, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000540)={0x2, 0x0, 0x1}) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r2, 0x2000000000000015) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nullb0\x00', 0x10000000010000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, {0xfffffffffffffffe, 0x1, 0x100000000, 0xbfc, 0x3, 0x7}}, 0xa) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r3, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x400003, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000001780)='vmnet1,bdetx\xb4\xa6*pd\xacself\'em1\x00}\xdc\x90\x17\x90\xfa\x89c6\xdc#\x85[t \x10\x11\x1a\xc1\a\x00\r\xbc\xeaE\xcdG\xa1\xe5\xb7\x05\xdc`E\xf9\xe7\xd8\x01\x04\x00\x00\x00\x00\x00\x00\xd6\x01\xdb\xf1\xdc\"\x10RD\xaa\xe5\x17XC\xc2\xf1\x89\x88G\xa2\xa0\xf3\xbb\xd9\\>R\xb1\x14F\xa9\xeb\xba\t\xc5\x01\'j)\x189;\xf2\xc4U\x1f\x14m\xd8\x85\x10$\xb1\xd7\xf7P(4\xc0\xcc\xd6\tr\x7f\xc0S\xdd\xf8\xbe\xb5w\x9f\x9c)F\xf2$\xfe\xdc\v\xc0`M\x13\xef\x96b\xfd;\xfa\xf4>T\xc0\x81\xc0s;dD\xc9\x1akr\x94?\xdd\xdd\xd0\"\xf9\x80-\xad!\xe2\xed=3\xe2\xb12\r\xac#c\xb7uN0\x04\xa5\xe4w\x9d\xa6v\xdeU&\xc8T\xcb\xf3\x9f\xaaN\xbc\xf3\xba\xfe\x15vL\xb0\nZ\xf7GH\xb4\xb1\xd1\x81\x03\x89 t[\x8e', 0x2) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r5 = geteuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001680)=@broute={'broute\x00', 0x20, 0x3, 0xe10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840], 0x0, &(0x7f00000005c0), &(0x7f0000000840)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000005d000000000076657468305f746f5f7465616d0000007465616d3000000000000000000000006272696467655f736c6176655f310000697036746e6c30000000000000000000aaaaaaaaaaaaffff000000ffaaaaaaaaaabb000000ffff000000e800000090010000c00100006f776e65720000000000000000000000000000000000000000000000000000001800000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"]}, 0xe88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x3, 0x800) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) 03:38:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid\x00') r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000640)='team\x00') accept$packet(r1, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) getpeername$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000800)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000900)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000a40)=0xe8) accept$packet(r1, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000b00)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000c00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@ipv4={[], [], @loopback}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000010c0)=0xe8) accept$packet(r1, &(0x7f0000001100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001140)=0x14) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000001240)={@loopback, 0x0}, &(0x7f0000001280)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f0000001800)={&(0x7f00000012c0)={0x524, r5, 0x6, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x13c, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x38e4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r10}, {0xd4, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x800}}, {0x8, 0x7, 0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0xe1f5, 0x9, 0x6}, {0x1, 0x2c14, 0xda4}, {0x2, 0x6, 0x2, 0x7fff}]}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r11}, {0x100, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x81}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r13}, {0x15c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r15}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x702c}}}]}}]}, 0x524}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r17 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0x8, @ipv4={[], [], @remote}, 0xffffffff}, @in6={0xa, 0x4e24, 0x1, @local, 0x10000}, @in6={0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, [], 0xe}, 0x6}, @in6={0xa, 0x4e21, 0x8, @empty, 0xae8}, @in6={0xa, 0x4e24, 0x0, @loopback, 0xfffffffeffffffff}, @in={0x2, 0x4e20, @rand_addr=0x401}, @in6={0xa, 0x4e23, 0xe67, @rand_addr="a532ee9fd67fe813ac9e7f18f8d12c27", 0x6}], 0xb8) r18 = dup2(r17, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r18, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r18, 0x4b34, 0x50) 03:38:46 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1e2e) r1 = socket$kcm(0xa, 0x40122000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff31) socket$kcm(0x29, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1ff) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000840)=""/220, 0xdc}], 0x1, &(0x7f0000000740)=""/229, 0xe5}, 0x10162) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80}, 0x20000054) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0xffffffffffffffd5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0xfffffffffffffffa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9dJ,\x00\xd2\x97\x04\x03\xdc\r') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000d80)='lo\x00\x96o8\x0fd\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\xfd\xfd\xff\xff\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\xf7\xef\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\xb9\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1dD\xe0IP\x88\xa2\xf2Y\x9af$$\xf1\x81\x96\xf7P\xac\xca\x80:!\xb4\x94#\xcb^\x9f\'\x03\xe3\x93\xb9\x82\xbf\xcf\xc4\xe3\xf7\x03Oh\xf2r\xca\x8ff\xbb/\x9f*\xaf\x1a \xa5\xa0?%M\xa5\x86\x98\xfa4\'1\xc7\f<\xcc@\xe8\x8a\xac.\xde\xe4\xc7\xf5\x9ck\xa40!\xe9\x14$\xb3\x05m\xb5m\xed\ft\x93\xd8\xa3\x80\'Y\xb9\x05\xbbt|\xbe\xbcz\n\xf3\xf5p\xf8\x9f~\x1b\xd0\v\x1cQ') 03:38:46 executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0xebaf, 0x0, 0x1000, 0x0, 0x0, 0x81, 0x20, 0x0, 0x2, 0x6, 0x0, 0x4547, 0x40, 0x0, 0xd374, 0x1, 0x0, 0x0, 0xe23, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, 0x7, 0x8, 0x0, 0x5, 0x7, 0x4, 0x0, 0x0, 0x2, 0x6, 0x3f, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8004) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x0, 0x0}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000a00)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x10, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000480)=0xe8) stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x3ff, 0x3, &(0x7f0000000400)=[{&(0x7f0000000300)="f96b6b55e2c9f858f757d7befd5f2c3e0e8046caa137188593c489af49c741056f26c0ced7987248111a0a6af4c8f928daaa6419577002d1c0e1d01dd90f3cdcbfe3f7a60aa68f5c8bedad049ea2f26cdf2c57bd0c029f6a34096c5a425b44da51e83cf51d50", 0x66, 0x7ff}, {&(0x7f0000000380)="c410053c6b3e5c5383d6657442d7385ab1c94e9aec7aaff9e07f285dcc8e06cedead4313d7176690a5d3f5b441e7e303bfe4863900f08659089cf7", 0x3b, 0x800}, {&(0x7f00000003c0)="4de093b22731fb02b2d762eb6a3c11b98421df84a24d686afbd1e3ed32", 0x1d, 0x5}], 0x4000, &(0x7f0000000900)={[{@discard_size={'discard', 0x3d, 0x1}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/ptmx\x00'}}, {@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, r2}}, {@euid_gt={'euid>', r3}}, {@dont_hash='dont_hash'}, {@audit='audit'}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, '^\'ppp0cpuset$'}}, {@audit='audit'}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) fchdir(r0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) syncfs(r1) write$nbd(r4, &(0x7f0000000580)={0x67446698, 0x0, 0x4, 0x2, 0x1, "450a69560704405c67dde72ce60f3afefa023ef51aee3b1204b818a7d7f5bf2823a34f93da60cb085633f5cef13145a49728132e2f5eeb4bb9f08752b38c8294d82bc633248ff58394dd9efb8266c055e5275d03ee3927af147889def12cfd025bb4d490afdccf4931a698694ee6c2c57d02ec2bf9d40a9ab087bff32d777a75af385a2ac7529ba54a487f241c7b63f533cf9ff079dfd4fab839847d097192868aec11ab53efc139091321e9424458db19682cca9517d0d6543af49f46af9e4f8d00e708506d1266b4650ba0359349543aceabf7c4"}, 0xe5) lsetxattr$security_evm(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000080)=ANY=[], 0x0, 0x1) ioctl$RTC_AIE_ON(r0, 0x7001) write$binfmt_aout(r4, &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000700080000ee8b08b7960ff7aa6e041a7700fdff863809aa0063b8f24252b1d85cbf000000000038f70f653f0ffb09f0d536b564df5e0acad550fe203534da91b5b9fb501e"], 0x4d) openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x200000, 0x0) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) 03:38:46 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000540)='/dev/nullb0\x00', 0x400003, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000001780)='vmnet1,bdetx\xb4\xa6*pd\xacself\'em1\x00}\xdc\x90\x17\x90\xfa\x89c6\xdc#\x85[t \x10\x11\x1a\xc1\a\x00\r\xbc\xeaE\xcdG\xa1\xe5\xb7\x05\xdc`E\xf9\xe7\xd8\x01\x04\x00\x00\x00\x00\x00\x00\xd6\x01\xdb\xf1\xdc\"\x10RD\xaa\xe5\x17XC\xc2\xf1\x89\x88G\xa2\xa0\xf3\xbb\xd9\\>R\xb1\x14F\xa9\xeb\xba\t\xc5\x01\'j)\x189;\xf2\xc4U\x1f\x14m\xd8\x85\x10$\xb1\xd7\xf7P(4\xc0\xcc\xd6\tr\x7f\xc0S\xdd\xf8\xbe\xb5w\x9f\x9c)F\xf2$\xfe\xdc\v\xc0`M\x13\xef\x96b\xfd;\xfa\xf4>T\xc0\x81\xc0s;dD\xc9\x1akr\x94?\xdd\xdd\xd0\"\xf9\x80-\xad!\xe2\xed=3\xe2\xb12\r\xac#c\xb7uN0\x04\xa5\xe4w\x9d\xa6v\xdeU&\xc8T\xcb\xf3\x9f\xaaN\xbc\xf3\xba\xfe\x15vL\xb0\nZ\xf7GH\xb4\xb1\xd1\x81\x03\x89 t[\x8e', 0x2) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r5 = geteuid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000780), &(0x7f00000007c0)=0x0, &(0x7f0000000800)) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001680)=@broute={'broute\x00', 0x20, 0x3, 0xe10, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840], 0x0, &(0x7f00000005c0), &(0x7f0000000840)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000005d000000000076657468305f746f5f7465616d0000007465616d3000000000000000000000006272696467655f736c6176655f310000697036746e6c30000000000000000000aaaaaaaaaaaaffff000000ffaaaaaaaaaabb000000ffff000000e800000090010000c00100006f776e65720000000000000000000000000000000000000000000000000000001800000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="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"]}, 0xe88) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) syz_open_dev$mouse(&(0x7f0000000580)='/dev/input/mouse#\x00', 0x3, 0x800) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f0000000040)=@default) [ 761.841969][ C1] net_ratelimit: 20 callbacks suppressed [ 761.841979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 761.853588][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 761.922034][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 761.928041][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:47 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000001740)=[{&(0x7f0000000000)='{', 0x1}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000140)={0x7, 0x3d9f, 0x2, 0x18c}) close(r1) close(r2) 03:38:47 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x40, 0x1f, 0x81}, &(0x7f0000000540)=0x10) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000500)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000640)={0x1, 0x9, 0x3ff, 0x3}) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:47 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x400000, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xfffffffffffffff9) ioctl$SG_IO(r0, 0x5452, &(0x7f0000000240)={0x53, 0x0, 0x0, 0x0, @buffer={0xee, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4) [ 762.483197][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 762.525267][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 763.041961][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 763.047801][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 763.053722][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 763.059497][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/kvm\x00', 0x181000, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000500)=0xb) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:49 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff}) fallocate(r0, 0x40, 0x0, 0x7fff) 03:38:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:49 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket(0x15, 0x80005, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) sync() prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000599000/0x3000)=nil) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040), 0x10) 03:38:49 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'m\xad\xfbdge0\x00\x00\x00D\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x1, [0x1f]}}) 03:38:49 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x3d) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) ioctl$VIDIOC_S_FBUF(r5, 0x4030560b, &(0x7f0000000040)={0x80, 0x40, &(0x7f0000000500)="520f93facf1a3fbb6ba05abc0e7075a87f06c390d50d0f87dc0076f3a24e4fab44c6dfe4e3e787df409c9d5e76d6e3a63086537391b82152348e37e42d7b0736d4a59a2970f75478295442cbd2d13a265b3febe9e69a499ca1c676828cac34a16a9403778247229e4cdc4e0de5f1dcc7b18e188d8876c536e9693bbe43c1a386e2e24d146402a0f4238541c54a204c9a3fa5488bbd2ea68d94f1ce6682aa72d4c115f3542f1ab39b33e3083660cf43671d2abcec73d316cb4ccff06fce187b7e2f6e0b942ada62bf3f9cece149a58816", {0x80000001, 0x7, 0x41564e57, 0x6, 0x0, 0x9, 0x3, 0x8001}}) 03:38:49 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000f72000)="94040013", 0x4) r1 = dup2(r0, r0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendto$rxrpc(r2, &(0x7f0000000040)="c887c96d96b09c00952de8062fdeb608e42c1d2644425985d988280fb98590eb2818866631bb87c8432998eb875c2fd34ba0b70b7b9f155d5e9a107921450a83e85ad1bea25185012ace4260037d9698cc97a76788bcc7987524faea32fe7d98b8ae6f48d3cb6179f3dac22462bc5185d99664128071cb6e574bbeb9d652c7f9f06fc8b179ba55b25a1ec833d42a3af9d8918cf5e203c59e0514f2d09e09c2498a8c2ac60ff5033c322ea725bf4904237e23fdb1918dea0d12abd5f747458b0013e1404836a45cb19beb3e7606d0cb0d6661", 0x84, 0x4000, &(0x7f0000000180)=@in4={0x21, 0x3, 0x2, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, 0x2a8) 03:38:49 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x2c) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCSTI(r2, 0x40046f41, 0x400000) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000180), 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000340)='/dev/full\x00', 0x800, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, "97570445e47bead949a19fa9bf928fab59a6fac3a06a6efa8ea2b5b3147a8aafd11c7c1cc6ca2cfe3b81eca46395d4672640efe2cc8a7f5939b5cfa32ff5cdc2", "ade1b3517b66e61059d1053654a5beb13253f0a653eb210ef878b72c20a3269a", [0xfffffffffffffeff, 0x7]}) sendto$inet(r1, &(0x7f0000000480)="03005f171ec39c8a8589f1f1d8198a665496bf3ef5d44b7f9da2fe2c8ada", 0x1e, 0x4008000, 0x0, 0x0) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000300)=[0x3, 0xb]) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x15, 0x11, 0xe, 0xa, 0x80000000, 0x6, 0xea}}) getsockopt$sock_buf(r0, 0x1, 0x40, &(0x7f00000002c0)=""/60, &(0x7f0000000180)=0x3c) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r4 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext={0x1f, 0x1000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0xfffffffffffffffe, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x101, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="12a4aeab0000699a269d06ab4090541daddf4e846d6cd534827cc3683d3465e4dc", 0x21, 0x20000800, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000008c0)={0xfffffffffffffffd, {0x2, 0x4e1d}, {0x2, 0x4e23}, {0x2, 0x4e1d, @multicast1}, 0x1c, 0x5, 0x7fff, 0x9976, 0x0, &(0x7f0000000800)='bridge_slave_1\x00', 0x4, 0x7, 0x800}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x5084f74d, {0x2, 0x4e22}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xfdffffff}}, {0x2, 0x4e24, @broadcast}, 0x0, 0x6, 0x20, 0x40, 0x2ba}) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000580)="0047f82f07d82c99240970") madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) bind$rds(r3, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x8) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1d) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000600)=""/193, &(0x7f0000000440)=0x28e) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)=0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x70, 0x7fff, 0x3cb, 0x89d1, 0x7, 0x0, 0x0, 0x20140, 0x4, 0x2, 0x6, 0x1f, 0xfffffffffffffff8, 0x8, 0x2, 0x40, 0x8000, 0x7c4, 0x8, 0x81, 0x9, 0x9, 0x7, 0x7, 0x101, 0x7, 0x1, 0x6, 0x3, 0x9b8d, 0xfffffffffffffff7, 0x80, 0xffffffff, 0x3, 0x1000, 0x8, 0x8, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f0000000380), 0x9}, 0x1000, 0x4, 0x200, 0x2, 0x7ff, 0x5, 0x1ff}, r7, 0xe, r4, 0x2) fcntl$dupfd(r0, 0x406, r4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10) 03:38:49 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r1 = getpid() fcntl$lock(r0, 0x27, &(0x7f0000000100)={0x2, 0x2, 0x4, 0x2f, r1}) futex(&(0x7f0000000000), 0x84, 0x0, 0x0, 0x0, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x2400, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000080)=0x7, 0x4) 03:38:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 764.169282][ T8534] IPVS: length: 654 != 8 03:38:49 executing program 2: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x37, '\x00', 0x9}, 0x2, 0x101, 0xae3, r0, 0xa, 0x8, 'syz0\x00', &(0x7f00000026c0)=['/dev/vga_arbiter\x00', '\x00', ')/em1]wlan0vmnet0\x00', 'ppp1*\x00', 'em0nodev\x00', 'security.\x00', 'mime_type\x00', 'posix_acl_access\x00', 'vmnet1]cgroup\x00', 'cgroup.ppp1cgroupwlan1!![.\x00'], 0x81, [], [0x4, 0x5fe1, 0xffffffffffffffff, 0x3]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x20d4d3a923b8d24f, 0x0) migrate_pages(0x0, 0xff, &(0x7f0000000080)=0xfffffffffffffd5b, &(0x7f0000000100)=0x9) write$P9_RREMOVE(r1, &(0x7f0000000140)={0x7, 0x7b, 0x1}, 0x7) 03:38:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000100)=0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000680)={&(0x7f0000000440)=""/26, 0x1a}}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x8000000800000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x0, 0x300) r4 = socket$kcm(0xa, 0x6, 0x0) getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000480)={@mcast2, 0xf, r5}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={r0, 0x7, 0x1, 0x40, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x20) setsockopt$sock_attach_bpf(r4, 0x10d, 0xf, 0xffffffffffffffff, 0xffffffffffffffeb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x241}, 0x20) openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) sendmsg$kcm(r2, 0x0, 0x0) gettid() write$cgroup_int(r3, &(0x7f0000000000)=0x8, 0x335) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x919) close(r3) 03:38:49 executing program 0: capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETNCNT(r0, 0x1, 0xe, 0x0) 03:38:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) keyctl$join(0x1, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000], 0x1f000, 0x80}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)={0xe8, r5, 0x220, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x68, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="94cacc673b1461f005608a44cdd7fd92"}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="fe1c9490728126c9fe6968f668c062c3"}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x51aa071e}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb4ba}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)={0xf5ec}) memfd_create(&(0x7f0000000500)=',vmnet0security(em1*\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) socket$unix(0x1, 0x0, 0x0) 03:38:49 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:50 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={[], 0xa}, 'lo\x00'}}, 0x1e) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080), 0x4) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x200) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000100)={0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 03:38:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:50 executing program 3: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/udmabuf\x00', 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) linkat(r0, &(0x7f0000000500)='./file0\x00', r2, &(0x7f0000000540)='./file0\x00', 0x400) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:38:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x2082, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000540)) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000500)=0x4) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:50 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x2000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x1ff, 0x4) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = perf_event_open(&(0x7f0000000080)={0x400000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000240)={r2, 0x1, 0x6}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e21, @empty}, {0x2, 0x4e21, @multicast2}, 0x8, 0x0, 0x0, 0x0, 0xfc3, &(0x7f0000000100)='veth1_to_bridge\x00', 0x7fff, 0x8, 0xf1c1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x81, 0x0) 03:38:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:50 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x7e, 0x81, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000300), 0x0}, 0x18) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 03:38:50 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x2, 0x1}]}, &(0x7f0000f6bffb)='DPL\x00', 0x1, 0xffffffffffffffa8, &(0x7f00001a7f05)=""/251, 0x41100, 0x0, [], 0x0, 0xb}, 0x48) 03:38:50 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0xb) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x616, @rand_addr="55894130214402547d5e623409fc2c83", 0x6}], 0x1c) 03:38:51 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000002c0)=""/4096) keyctl$read(0xb, 0xfffffffffffffffd, &(0x7f0000000280)=""/4, 0x4) 03:38:51 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x80) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000140)=@v1={0x2, "9059"}, 0x3, 0x2) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000), 0x5, 0x10000000000000) ioctl(r1, 0xc2604110, &(0x7f0000000000)) 03:38:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:51 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lstat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x7e, 0x81, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000300), 0x0}, 0x18) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) 03:38:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000500)) timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x2, @thr={&(0x7f0000000540)="514cdcaeb947dde470ef43a9b3171efebf0a6412e7db6eb202fdb34a40aaa0577e8844b2a411150dd34b83f08fea8d", &(0x7f0000000580)="949c274aea5f89e43b938895a004a89adfdf410d6b879adb084653677dbb433cdff6928de3c921dea7aa6dc8376a"}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r2, 0x4b34, 0x4d) 03:38:51 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0xffffffffffeffffd, 0x0) 03:38:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0xfc, 0x80000000, 0x0, 0x0, 0x0, 0x1], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x40840) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:51 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) creat(&(0x7f0000000340)='./file0\x00', 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x8000400) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0xb2c, 0x101000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@loopback, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) r2 = mq_open(&(0x7f0000000000)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\x06\x00\x00\x00j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f1, 0x0, 0x0) r3 = dup2(r2, r0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1f) lseek(r2, 0x50, 0x0) 03:38:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:51 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), 0x4) bind$tipc(r1, &(0x7f0000000000)=@name, 0x10) truncate(&(0x7f0000000140)='./file0\x00', 0xffffffff000000) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x2, 0x100, 0x20, "f831567a2c48ba2384af3d02080d84a2f18fa011df7ac739db84a82a40089124f75736e30492c444f320dafb85748e63f831866247141c8cf49df99b864589", 0x3e}, 0x60) 03:38:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:51 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) fcntl$getown(0xffffffffffffff9c, 0x9) r0 = getpgid(0x0) r1 = getpgrp(r0) prctl$PR_SET_PTRACER(0x18, r1) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4cc7, 0x2) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000000c0)) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x6a, 0x20000) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000080)={0x2, r3}) 03:38:51 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x200402, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000001c0)={'team0\x00', 0x0, 0x8}) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffd000/0x2000)=nil) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x800, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000080)="0f20d835080000000f22d865f2450f1beb6d66450f3881bd0d000000c422b8f395000000008f2978d188000000008fe92099090f005ca13d66f2a765f3460f30", 0x40}], 0x1, 0x60, &(0x7f0000000100)=[@dstype3={0x7, 0x1}, @cstype3={0x5, 0xe}], 0x2) r4 = fcntl$dupfd(r1, 0x406, 0xffffffffffffff9c) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r4, 0x5201) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x1) 03:38:51 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x400) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@gettaction={0x20, 0x32, 0x201, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}}, 0x0) 03:38:51 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300), 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101080, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000000c0)) ioctl$KDMKTONE(r1, 0x4b30, 0x7) [ 766.514961][ T9192] tc_dump_action: action bad kind [ 766.558602][ T9196] tc_dump_action: action bad kind 03:38:52 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000640)={r1, r1, 0x6, 0x2f, &(0x7f0000000040)="3902c657e40255781e39176b8c73ab21f0105a08015964fe7bc99688fd02fe5daa277bf19f78a6749e61b54d6ed42d", 0x8001, 0x9, 0x3, 0x3, 0x100000000, 0x3, 0x2c4c, 'syz1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1000088, 0x84010, r1, 0x0) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$binfmt_misc(r5, &(0x7f0000000500)={'syz0', "0c07d320d5c6dafdee6936fc62a93e9348195c4b78f460b3c03ef7ec1adfd43f3c962b546e71015e4ec18717e774a2231b21b5d2bec1006b7500e88df56aeb0501769cba0f48b05669a495d0779fbec468a4e5356f0b75499b2a7b69fcc90d2ee5afd0befb57"}, 0x6a) ioctl$KDADDIO(r5, 0x4b34, 0x8001) 03:38:52 executing program 0: r0 = memfd_create(&(0x7f0000000040), 0xfffffffffffffffd) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0xc0bc5351, &(0x7f0000000280)={0x13, @time}) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000300)="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") ioctl$KDSKBLED(r2, 0x4b65, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000000)={0x6, 0x2, 'client0\x00', 0x6, "ab32018f2bea91d5", "fa50a51b6ffb33bdad8bb45e6bcf6ac90e78dbeac05b5b14b6ff498f9368f8d1", 0x7f, 0x4}) 03:38:52 executing program 2: clone(0x4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() rt_tgsigqueueinfo(r0, r0, 0x29, &(0x7f0000000000)) tkill(r0, 0x8) 03:38:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:52 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r0, 0x2000000000000015) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:52 executing program 1: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x80000000000006) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)="4c2eb30dcb2bb31c6d6cffa549a355b8bd47043198f6a09496bd9033abbb1ad4bb6329d4a1bea77f7bf5843b3c49063cbb9379cc58d8106c5169fbe0c9db1a8ff40b76a3934dbdccb35d4f4f61e525e49bd61d04326b76fd1ab594d097fbf75c66", 0x61) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000580)={0x5, &(0x7f00000005c0)=[{}, {}, {}, {}, {}]}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000140)={0x6, 0x70, 0x100, 0x3583d053, 0x1ff, 0x1, 0x0, 0x5, 0x10000, 0x6, 0x4abe, 0x2, 0x8, 0x8, 0x1, 0xc000000000, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x0, 0xffffffffffff8000, 0x2, 0x1ff, 0x200, 0x10000, 0x20, 0x0, 0x3f, 0xfffffffffffffff7, 0x7, 0x9, 0xfc88, 0x80, 0xb9, 0x1000, 0x0, 0x4, 0x0, 0x460b, 0x2, @perf_config_ext={0x3, 0x4}, 0x8, 0x0, 0x7, 0x3, 0x8, 0x5, 0x7}, r4, 0x5, 0xffffffffffffffff, 0x3) r5 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000300)=0x100000000001f, 0x4) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x100000001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x38040, 0x2, 0x3, 0x2, 0x0, 0x6, 0x800, 0x800, 0x0, 0x0, 0x0, 0x9991, 0x1, 0x0, 0xffffffffffff4017, 0x7, 0xdc6, 0x0, 0x5a, 0x0, 0x4, 0x0, 0x9, 0x0, 0xc86, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x0, 0x7f}, 0x400, 0x0, 0x9, 0x3, 0x7, 0x0, 0x5}, 0x0, 0xf, r0, 0xa) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000500)={0x0, 0x1000, 0x1, [], &(0x7f00000004c0)=0x800}) sendmmsg(r5, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, 0x0, 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x2, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000900)=""/4096, 0x1000) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2, 0xfffffffffffffffd}}}, &(0x7f0000000440)=0x84) 03:38:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x5, [], 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f00000000c0)=""/5}, &(0x7f0000000200)=0x78) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x0, 0x11, &(0x7f0000000240)='cbc-camellia-asm\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0)=r3, 0x4) 03:38:52 executing program 2: r0 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x8, 0x200000) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000001c0)={'ip6tnl0\x00', @remote}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000080)={r2, 0xf3, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0xc, &(0x7f00000000c0)=[@in={0x2, 0x0, @local}], 0x10) [ 767.202002][ C1] net_ratelimit: 20 callbacks suppressed [ 767.202011][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 767.213724][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 767.219693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 767.225662][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 767.231594][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 767.237775][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:52 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:52 executing program 1: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='trusted.overlay.upper\x00', 0x0, 0x30e, 0x0) r1 = semget$private(0x0, 0x0, 0x31d) semctl$GETPID(r1, 0x4, 0xb, &(0x7f0000000080)=""/8) write$P9_RLINK(r0, &(0x7f0000000000)={0x7, 0x47, 0x1}, 0x7) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f0000000100)='\x00\x00\x00\x02\x01\x00\x00\x00\x00\x00\x00\x01\x04\x00\x00\x00\x00\x00\x00\x00', 0x14, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x0, 0x70bd26, 0x25dfdbfc, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4) write$cgroup_type(r0, &(0x7f0000000300)='threaded\x00', 0x9) 03:38:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x401, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x0, 0x6, 0x0, [], [{0xd, 0x1000, 0x4, 0x4f8a, 0x0, 0x7ff}, {0x6, 0x7, 0x7f, 0x9, 0x3, 0x3f}], [[], [], [], [], [], []]}) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:52 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100000, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000140)={0x17, 0x6, 0x7}) r2 = dup3(r0, r0, 0x80000) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000240)="8b7e6b7f85e32447801f89a210f71678708cac9e45255a08c5d1c649a4cb68a7386f032172fd32823416cb3a7eef3aa247f67e0eb0f9290cb18fd2590a6a112c9903e8d29b80247f9e74c35e70d4f26f7ce6de125244c31b466197d14b17", 0x5e) setsockopt$inet_dccp_int(r2, 0x21, 0x11, &(0x7f0000000080)=0x1f, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0x57}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x99, &(0x7f0000000180)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="a3375f83dd2586651779c2b1dc11", 0x0, 0x6a9}, 0x28) [ 768.082381][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 768.089464][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:53 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = getuid() stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000700)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000000800)=0xe8) r9 = getgid() stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getegid() r12 = getegid() lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [{0x2, 0x3, r4}, {0x2, 0x5, r5}, {0x2, 0x2, r6}, {0x2, 0x2, r7}, {0x2, 0x1, r8}], {0x4, 0x7}, [{0x8, 0x6, r9}, {0x8, 0x7, r10}, {0x8, 0x2, r11}, {0x8, 0x4, r12}], {0x10, 0x5}, {0x20, 0x2}}, 0x6c, 0x1) r13 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r14 = dup2(r13, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r14, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r14, 0x4b34, 0x50) 03:38:53 executing program 1: syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$CAPI_GET_FLAGS(r0, 0x80044323, &(0x7f0000000180)) r1 = open(&(0x7f0000000100)='./file0\x00', 0x141042, 0x10) write$UHID_INPUT(r1, &(0x7f00000019c0)={0x8, "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", 0x1006f}, 0x1006) statfs(&(0x7f0000000140)='./file0\x00', 0x0) fchdir(r1) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f00000000c0), 0x8080ffffff06) 03:38:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:53 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x2) r2 = socket(0x4, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x8002, @multicast2}}}, 0x88) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x29, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) 03:38:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8000, 0x0) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffdd2, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x11, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @gretap={{0xc, 0x1, 'gretap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xc, 0x1, @link_local={0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000140)={0x80000000, 0xfffffffffffffffe}) 03:38:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000040)=r3) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000500)=0x200) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'team_slave_1\x00', 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in=@broadcast, @in=@broadcast, 0x4e23, 0x3, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x3b, r4, r5}, {0xfffffffffffffffa, 0x8, 0x3, 0x400, 0x9e3, 0x9, 0xfff, 0x7ff}, {0x0, 0x40, 0x3ff, 0x3fffc000000000}, 0x80000000, 0x6e6bb3, 0x1, 0x1, 0x2}, {{@in=@remote, 0x4d6, 0xff}, 0xa, @in6=@rand_addr="38f90e7cc31abfb3fbdeb9ba76f69bc0", 0x0, 0x3, 0x2, 0x1c, 0x4, 0x7, 0x8f53}}, 0xe8) tkill(r2, 0x2000000000000015) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r3, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) [ 768.162021][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 768.168676][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:53 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x40000, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x1, 0x5, 0x7, 0x7, 0x0, 0x64, 0x10400, 0x4, 0x2, 0x3ff, 0x3ff, 0x3, 0x81, 0x1, 0x8, 0x3ff, 0x80000000000000, 0x200, 0x78, 0xbdba, 0x7ff, 0x8, 0x7fff, 0xfffffffffffffffb, 0x6, 0x8, 0x5, 0x100000001, 0x100000001, 0x2, 0xeb, 0x4, 0x0, 0x5, 0xfa, 0x9, 0x0, 0xbee6, 0x5, @perf_bp={&(0x7f0000000040), 0x4}, 0x5080, 0x7ff, 0x5, 0x1, 0x200, 0x0, 0x50}, r1, 0x4, r2, 0x8) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000440)={0x100000000000000, 0x0, 0xe1, 0x2, 0x5}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0x4008af03, &(0x7f0000000000)=0xbc) r3 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x5) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) shmctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{0xfff, r4, r5, r6, r7, 0x1, 0x8}, 0x1, 0x9, 0x5, 0x4, r1, r1, 0x401}) 03:38:53 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, 0x0, 0x0) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:54 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40840, 0x0) recvfrom$unix(r0, &(0x7f0000000480)=""/200, 0xc8, 0x2060, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0/../file0\x00', 0x200, 0x2) r2 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f00000000c0)={0x8, 0x80000000, 0x0, 0x215, 0x9, 0x6}) open_by_handle_at(r1, &(0x7f0000000040)={0x8, 0x1}, 0x0) 03:38:54 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/ipc\x00') r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000001, 0x2000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000240)={0x89, 0x200000000000001, 0xff, 0x6, 0x84e0000000000000, 0x7}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000440)=0xc) socket$rds(0x15, 0x5, 0x0) setreuid(r2, r3) mount$overlay(0x400000, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2c6c6f776572645a69720bb844bc4cded6323d2e3a66696c6530919608ee3897c2428e899854bafa3db2e675067aff9524e2338d3aaafe9e3665f0b221db71f7e49668da0a174377a25763a104000066f060008f787001c0a02da3b8ce34eadc3015de090d23ce1c27449322c94c37d49f4881fd1e87810feae29a093a9a8b2e904a76c6efa545f04d16a2949cbc3ae0c0004d01c10e739d56a9ca00044e4bbc119112a8958341eb72c75032fc8e0fd064f3ab9f89"]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2, 0x0) getdents(r4, &(0x7f00000001c0)=""/103, 0x67) 03:38:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, 0x0, 0x0) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 768.957211][ T9668] overlayfs: unrecognized mount option "lowerdZir ¸D¼LÞÖ2=.:file0‘–î8—ÂBŽ‰˜Tºú=²æuzÿ•$â3:ªþž6eð²!Ûq÷ä–hÚ [ 768.957211][ T9668] Cw¢Wc¡" or missing value 03:38:54 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x8007d) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_tid_address(&(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) [ 769.069367][ T26] audit: type=1804 audit(2000000334.469:156): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir070676743/syzkaller.nPRBb5/1249/file0" dev="sda1" ino=16579 res=1 [ 769.126586][ T9668] overlayfs: unrecognized mount option "lowerdZir ¸D¼LÞÖ2=.:file0‘–î8—ÂBŽ‰˜Tºú=²æuzÿ•$â3:ªþž6eð²!Ûq÷ä–hÚ [ 769.126586][ T9668] Cw¢Wc¡" or missing value [ 769.224321][ T26] audit: type=1804 audit(2000000334.499:157): pid=9730 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir070676743/syzkaller.nPRBb5/1249/file0" dev="sda1" ino=16579 res=1 03:38:54 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x8000000, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000640)={0xffffffffffffffff, @capture={0x1000, 0x1, {0x4, 0x89}, 0x2, 0x7fffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_execute_func(&(0x7f0000000340)="3e650f73d4000f3805e1c421fae6e13ef0450fab24a1400f4cccf046104500c4a17173d4f6f2440f51df44c1533907f30f5d1a") ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000380)={0x10004, 0x0, &(0x7f0000010000/0x1000)=nil}) sendto$inet(r1, &(0x7f0000000040)="852c3aed7b", 0x5, 0x4000, &(0x7f0000000500)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r6 = dup2(r5, r4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r1, 0x50, &(0x7f00000003c0)}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:38:54 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) write$P9_RRENAMEAT(r2, &(0x7f0000000040)={0x7, 0x4b, 0x1}, 0x7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820000000000000000a5ddf7", 0x10) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff9a, 0x0, 0x0, 0xfffffffffffffef2) 03:38:54 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40840, 0x0) recvfrom$unix(r0, &(0x7f0000000480)=""/200, 0xc8, 0x2060, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0/../file0\x00', 0x200, 0x2) r2 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20071026, r2}, &(0x7f00000000c0)={0x8, 0x80000000, 0x0, 0x215, 0x9, 0x6}) open_by_handle_at(r1, &(0x7f0000000040)={0x8, 0x1}, 0x0) 03:38:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, 0x0, 0x0) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, 0x0, 0x0) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:54 executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000009400)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x5}, 0x1c) syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @broadcast}, {0x1, @broadcast}, 0x2, {0x2, 0x4e22, @multicast2}, 'ip6gre0\x00'}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601afc97004d8800fe800000000000000000000000000000ff0200000000000000f5c3863a5b750000000000000100004e20004d909ae29607149378d33e1db1c73936c77aa3f7fac33b042bd368236862531934ecb1c373d6ea51369e92fb96cc7c6fe4e24d1fcafff87429e50b32881721afab69cc3712c37ed03b84c4d826c82943914edf21aefa0af1860a3860f04bac4e7ee0e1d67e42898de4084c32b48a409b0449815c5889a5c0424513b4bd1d48e59c117141500ea864e7c0f59fa6a25a4debb10596f849190976953d"], 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) lstat(&(0x7f0000000080)='\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="dc000000190001002cbd70000300000000000000000000000000000000000000ac1414250000000000000000000000004e2100014e2200010aaf000000c29496347d3d6bde20122f7f3b2c73ad731d2f9c3f4b626104f3f85d10a25d5a557d2b15f79a182dfe6bf7c645f85eaf6935d95b6865548312c28268a092fc3f9f9f415ec99c58d5e1c0cde5801e0d1d7fbe4670663d36", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="090000000000000007000000000000000004000000000000d7c1000000000000664f000000000000000000000100000020000000000000000100010000000000050000000000000009000000000000000000010000000000dc0000000000000007000000b26b6e00030002000000000014000d007f00000100000000000000000000000010000a0028bd700026bd700000010000"], 0xdc}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) 03:38:54 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:55 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140)=@assoc_value, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) 03:38:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x1f000}) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000500)={[0x100000, 0x4, 0x4000, 0x4000], 0x6, 0x0, 0x80000000}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:55 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffdf3, &(0x7f0000000980), 0x0, 0x0, 0xfffffffffffffea8, 0x20000001}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe9\xdc\x00', 0x200085}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000000)={0x4007, 0x80000000, 0x100, 0x1}) 03:38:55 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2fc3"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r4, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r4, 0xc0305616, &(0x7f0000000500)={0x0, {0x1, 0x3}}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000640)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0xfffffffffffffffc) 03:38:55 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x80000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={r1, 0x6, 0x30, 0x1, 0x9}, &(0x7f0000000300)=0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') uselib(&(0x7f00000001c0)='./file0\x00') chdir(&(0x7f0000000180)='./file0\x00') mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2c6c6fabf08d00000543664000000000000000000000"]) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 03:38:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6760000"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x83) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x35, 0x4) 03:38:55 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video37\x00', 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000280)={0x17, 0x83, &(0x7f0000000140)="f1a58d7f476d4b9af17ad73a0016baf24c86c5f19c514b3f8462ebe76b9ce8a1491223b3f8c8ad0d5d98c0547c1482f40d325f3341c0da12a5f5abdc491c3067af46d6ee9737393280d4d62627579d4bc9592b1a25c9ce0f837337b8c918c2bc61c4f4ea7ae8b681ba273e1c8d16b100f686289d35ce595a5910bdad7e6a8261559eda"}) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f00000000c0)={0x6}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) syz_mount_image$xfs(&(0x7f00000002c0)='xfs\x00', &(0x7f0000000300)='./file0\x00', 0x5, 0x4, &(0x7f00000006c0)=[{&(0x7f0000000380)="a7f3a110c3ef59e7dd54989fbf6cec1511aa49eac75c67ee1c882bde4b8441c3b5de50d5dbc5070036b39e6f2b93518d829c8acae7302aaa457d141b732b1145edee7a7936fd3d9889fc54fa0dd1d51e7eeed6511a7071753bf001461693bdd233a941ecbf5fe71cc70b86588dc3a95f42cf415ae19fddc127b7295adb74dcf8b454fa2f7fde577c2d5395f027", 0x8d, 0x7}, {&(0x7f0000000480), 0x0, 0x8}, {&(0x7f00000004c0)="7935963f09dcfe3013fd779739f82e99cb9f79504d9ab93217a591554eb1f512725b0f60faa918677406794b46d34ab1255d29bf5b2fc1b699abef41ffea52d8f2c61a6a0bfbc242660f7209899c476be348821777a1f559beefabd36ffe02c2b5674a78b0a8a0e8d6f9c2d260979b06973545423cedca9f03eb2a93c5a10bce15166c80ddbc22a2f4c169042200abfd4b7f940fe26a386a8fdb251f6b7160744a60b9240083666c57d83dabb828a2b532b6101edf8a77d84abe522e0cc05eac9974df259d513430ade409c9283e018a34b20679f56074eed276832abc9b25079a6eeed2", 0xe4, 0x5f8}, {&(0x7f00000005c0)="5032f65b7e04701eaf5fe2757d4f26d1bc699f804c9ee81b4f1a326c10d49ac7a2700f9675cda9ac297d31317ee6cddf91ee77f4e0ae020f3653628d2983fbdc303d7fbdf601dad1e3197d2ef8c6d10bc4e702719cae2147162d53814c3853229d4aa1a0d47802cc503f57e903803ce8cf882bbe5a270d237e3f76ee575b1946ec99faef9aca4d86cec74073458b2b8bb2c1cf6645c9b574a693b7c6a88b57b98b85b6cb9727a71bd9b0b8a5c1608b4b9ee0cba5daed1fa017b6d5123d7bbd4666d21f1c6e0676fda8599830f0bb3d472a", 0xd1, 0x5}], 0x80440, &(0x7f0000000740)={[{@grpid='grpid'}, {@nolargeio='nolargeio'}], [{@subj_role={'subj_role', 0x3d, '/dev/video37\x00'}}, {@subj_type={'subj_type', 0x3d, '/dev/mixer\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '\xdf^\'mime_type'}}, {@dont_hash='dont_hash'}]}) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000040)={0x8, 0x1}, 0x0) 03:38:55 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x404800, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000500)={0x0, 0xfffffffffffffffc, 0x8001, 0x1, 0xff, 0x4, 0x7f, 0x1, 0x7fff, 0x4, 0x5e26}, 0xb) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) write$FUSE_GETXATTR(r3, &(0x7f0000000540)={0x18, 0x0, 0x1, {0xffffffffffffffff}}, 0x18) fallocate(r1, 0x10, 0x9, 0x3ff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r2, 0x2000000000000015) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r3, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:55 executing program 2: bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000080)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) connect$inet(r1, &(0x7f0000000040)={0x2, 0xffffffffffffffdc, @local}, 0xce848b3681a20e52) open_by_handle_at(r1, &(0x7f0000000200)={0x89, 0x4, "8afc3da6812dd6771c1530f2d00b7c65c9c6aa3496af36e041674ae2e4368aaad32027aa9d4721c98eb34f109fa5b7f7ee1037c7476f253e2bdc2ddfe2cad0ae0ec5fb0ee3f4eddfd79c48526287bf540e4b0dce51c317e704a1fdba4ee384df6629f87295bdf69510625cda53c4847a0a9c427ebb4bfa2345e14cbf48fc53aea1"}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:38:55 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:56 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:56 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0xe08, 0x70bd2d, 0x25dfdbfe, {}, [""]}, 0x1c}}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x400c0, 0x0) mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f00000003c0)='&e$\x81XK%\xd7\xe4\x9c\xe3\xc1\x99\x8e/}iR\xd5\v@Z\xe1\xd8\xe8\v\xe6\x87\x93\xd2a6Z\xd3AO%\xda\xdb\xfb$\x0f\xb9\x1fQw.HOo-\xca_\xca\xff\xfe\x85\x1c\xeb$\xbb\x0f\xa5Z@]\xadt;\xf3\x95\x89(|\x9e\xb8C\x896\xdb\x89\r\xe0})D\xee\x7f\x92\xf2\x82\xe3C?\xcc\x13\xce\x88\xd7R\x10\x87~\xa5\xff\x1bP\xefqH\x80\xf0m\x19\xec\x12\x10\xe6\x163\a4I\x94h!(\x19.\xbc\xadx\a\x83\xb4\x98\xe3\x9d\x9f\x1e}\'\xcc\xf5s\x82\v\xa8\xb2\xc4\xf5$\x18O,3\xecZ\x8eW5\xef\xfe>\xd9=#\x11\xc1rys\x81\x80\x9b\xfd\xbc\xad\x17A\xae\xfd\x11\x1d\x9b\xf7\xcf\x01\\\xbb\xd1r\xbbq\xb0\xdf\x1e\xc7\xdb\xc1\x89\xec\x12A\xce\xd4-Q[\xea!\\\n.\xc4H\xc4\xe1\xf6\x01>\x01\xaa]\xfb\x8c\x05\xcf\x9ah\xf8\xdd (\xe5\x86-N\xb3Dp\x1f`/\xc9\xe2\rE>\xc9I\\\x10\x91\x1f\x80\xde\xd7\xd2\xce\xdf@\xdb)Ub\x9dHe\x8c\x1d\xfe\xcf\x8b,a`\x9b\xa5\xf8\xf1B\xacT,)\xc2\xa4\xa9\xe8\x92H\x88\xff\a\x00\x00\x00\x00\x00\x00\xc6\xbf\xe7`6\xce$\xda6\xf0\x15\x7f\xfe\xb9\x90\xc3\x1d\xf9\x1d\xfbZ\xecV2\b\xf1\xd3\xed\xb7\xc1J-\x1d\x9d\xe1\x96\xc7sP\x00\x00\x00\x00\x00\x00\x00\x00') 03:38:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(0xffffffffffffffff, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:56 executing program 0: mknod$loop(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) r1 = open(0x0, 0x80, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x80, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000580)="76e66ba6216dc4f15e992895dfb315d82225b67671566a1cd6f2a034a2dd86108bc8e987a353480153ed163d91199baed966e97b3a9e40f1d1509135016aeaabb3058b18f49aefb52ecc12985c8674f425a0b40e811b4ae2fb647a2d41af25572f07167f38e0dd5401fc643dce813d796a829a28a50ea7c1c65595e40844a60c0e585ef5094f957365ee42cdbabf8b5e763cd71ef925a0f8772b403fa608a775a9927e4cd136a3226a5e3fbf2aaf4afcd3b681284dbc518f15f9d6a681e5ad79c0081c3a69951fae16e57e535b035053d94ec2d075e28c8b90723072c5cddcdb172f6e14d8863db158ea8fdf600e6ef791aeb55f6ac8d734663f4025eeb7e9f5") fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0xfffffffffffffffd) r4 = request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)='vfat\x00', 0xfffffffffffffff8) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000300)="97e879069e2842dffa913253593f4e35ef025436c3bc2e55e10735f1a3a39a78eafebf41a87f99576f046bacad6670740a4fa225895cce9501e0cdef4529f29e969370cb4d13f214650aafe7dee8c59a74fd734d808bb7854f2b733772716099c5ea2fabc45f293f0b9ef72222962bb97d2c45384f9f9d23c62bade907f0927409e1925322b0932b6374f8d92ef426241f9bee22cb15c1fb3003080b622d57db4e42526e0fcd9238d048e34f10207b3df0c051b1b01def9eee92a49892", 0xbd, r4) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="00001a9c9bfc20ba9fe87bac1e631f12132a16551ed3f0f0a08594d5df83f0262172d5c058599419ee8089ef078d151f414e8d16a9c2e4cca7d524059f9b1eb737cbc0307faefa0145a6051a63320de5597a79f3ff3eadd087ec65531e4d38f630c37b13c1c461e8c16e01aa2af9d8f4b25edc8fdc45e979bc5493e0193e5be929c600000000000000000000000000"], 0x8f) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 03:38:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x83) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x35, 0x4) 03:38:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) [ 770.932529][T10132] tmpfs: Bad mount option &e$XK%×äœãÁ™Ž/}iRÕ @ZáØè 懓Òa6ZÓAO%ÚÛû$¹Qw.HOo-Ê_Êÿþ…ë$»¥Z@]­t;ó•‰(|ž¸C‰6Û‰ à})Dî’ò‚ãC?ÌΈ×R‡~¥ÿPïqH€ðmìæ34I”h!(.¼­xƒ´˜ãŸ}'Ìõs‚ ¨²Äõ$O,3ìZŽW5ïþ>Ù [ 771.056254][T10233] tmpfs: Bad mount option &e$XK%×äœãÁ™Ž/}iRÕ @ZáØè 懓Òa6ZÓAO%ÚÛû$¹Qw.HOo-Ê_Êÿþ…ë$»¥Z@]­t;ó•‰(|ž¸C‰6Û‰ à})Dî’ò‚ãC?ÌΈ×R‡~¥ÿPïqH€ðmìæ34I”h!(.¼­xƒ´˜ãŸ}'Ìõs‚ ¨²Äõ$O,3ìZŽW5ïþ>Ù 03:38:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(0xffffffffffffffff, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:56 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x10000, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x8, 0x0) getsockname$packet(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, 0x0, 0x0, 0x1000}, 0x5}], 0x5, 0x0, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x812b2ddfb9cabd4b, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030305596f3bb11069f843d6c06c41115fd9c3030346532302c616363657373673d3078303005fbff5a0045169a30303030fc322c616669643d30783030303030303031303030ad153030302c63616368a1096d6d61702c63616368653d66736361", @ANYRESDEC=r1, @ANYBLOB=',\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:38:56 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) socket$inet(0x2, 0x6, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f00000000c0)={0x8001}) wait4(r1, &(0x7f0000000140), 0x0, &(0x7f0000000280)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f0000000300), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'}) r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x6, 0x8001) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000240)=""/61) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0xfffffffffffffffc, @broadcast}, 0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0x77359400}) 03:38:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x83) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x35, 0x4) 03:38:56 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(0xffffffffffffffff, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:57 executing program 2: r0 = socket$inet(0xa, 0x801, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@broadcast, @dev, @initdev}, &(0x7f0000000140)=0xc) r1 = socket(0xa, 0xb, 0x6) sendmsg$tipc(r1, &(0x7f0000001440)={&(0x7f00000002c0)=@id={0x1e, 0x3, 0x3, {0x4e21}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000300)="bea38b66c87c9a2f9d52029dad6995afa512af7a98c5dddd74c3d5a2134b979152432bbce39b76e5d84c8b5f2289850a4d81effd0c70b01132526641b30c40363e0ffc56d556c12805625a3bfe734e70371bf1d7e11dea2b19b1f2bff8847a5e7242f664b6cf39575bab76565971fdeb1898f059f9d0413c526022c96f97555ca7d633969d9813bff7d00c7ece99", 0x8e}, {&(0x7f00000003c0)="8f18cc941b5bf0663ac4e8140ed957b1f5c857b3b5b0883d4117bdb5e43ad737336bdf6027938f252db56afff2e4ed1e840baf4b5e599a19eb1ce7a522a238202ea591a8c6f4ca924a2dc4bcaa010e169bc1d7022cd92e5a3b4a2767fa237f6354f54bf1a94e4a21a086d2319068b846c24a1a6b89081fd4e8710fc6cfdd2d33005cfc99ceb331d287eb9e0ae403a93f5537907c32a02f4f5680ecf8a37efb4b4386cc9632f8fc622056c3e4413f15aedaa9a1da5d125be884b54ab3b9501538058ef6f3e66d921bb72d28c6737ed62b1bc8ada215fd2abfcf53760657db2f7a5ec0e029e3b3da42311b355476fdbd1e7c9a46e33f823c62b066ace22c5776448b3bb027f5f2e2fbe85749f8c5a739ff8811e5cba4e0b5817a3455d637d61cafde46a7dee93de906af041fcf2cd31b998573f864519b1e7ee75de57fef160ad601f201ba9af290e338fac172c03b1ea510d25c1fcd0cfad974b3657a1fce596c1cfd6a6082e7c28ae1fff238263caadd72a70a1bdefe3d600db743cacd8dc15c735568f8b8c0987ca87af43628254b50108df52ecd22ec8a83e3239021e49dc21d5118830fa745751ecc6d72f72795b9d156fffae78dc6585e7e3609ce89ff8b62c0eabfe24fb760747dcc78f9470eb8c46c56738d160ae41d55db915c2324e8db96607280f372ee957167c19ee92d72a51aa47ba0c98b27cd913dbed9804a3f0e79a6b79350b58ec8f11ab92262968540e21107e91ef844552355bd4636df55f160f303b6d0f96773392dd95096495ea542fd76184199947d055d90cd17ecb38adf6dc8a68eee7fa0b1cc7cd44cbde10997909ace5ae961efb7c95b23a35daebedd66787abe72359e5dc77353777f4f3573b120100a2404a29eb4d673fe74de48520831af6d246a1678b636afbbab456723a0c75252da84988f2017d860467af6a135bb2298b537b748a0cd9130fb3884f554455d3e0180bf45336896778be9af1d48a84831ae67df30afc67187cfc1d57d2b74c80224a0d184449c56277b0f14c0062526bfe891d0bb5fbf940562791f6b129212af42c86e816a0a3f993471f972b1d6749c2bac7e91767ffeef2f25e8af5404caee38394413a5d40a379b9c1437d5f8747c39b0717eeac93c1c61fb1d9e020900e08fc8bbe93f84b57f10a71f856be02af283cbafb259d38e8b36684ed1c3ac4be2f19ee64d93f8d34b90491dbabf858cb055d2b839af8e025ca3e5bfa4a90b58303fec69f333ff4a70265d95dd529b5efa11d308c16ee0aa8e97f95241b75acdcdec0bc8fbf7a64cb991ad3869dd3bb9e236137f5a02e052f605574c52c102c71d712aea1dc2bf9beb9c1735ef56d62c20c8e27fb27e5aa54154fe91b93827a78692bc1e22fb7d5433e443173e75e335607ecc1ac6ba6cc2a1778b9c09efd348134a6c75f34c81a432c880cb38ef223957246194dcf46132d45305c8f86c98633bf58a2bb49a4509fe7a92e5d36f3753814fadb7118c9e1c18f05f086baa630e7f6157054c0f46ec60053c927e1083fc72cf253a22abde6ee3f1b6c2c3010caab519515ced713354d8ca44e2f58856fd0071b98f0007b65b69d0d02b2ec2a9a485f4abf60ef6f6c4e2b29445b2a75fdb5198b32696cd849594cfcba092536adcf78f8fd966523cf8964122d9bf095de8bb4d8dbd9478ccf20a9b9b45c803ac95a34425ca48b52584afa4c334b2ca3cc13a521087b29016361a3ad28be70f67e151246a813388f158191f9d509aebe895cbf0a934d558aa3900794c66b805c8360fe5175c3bdd92cd091b6e2dd1c5126cfd4b02b415c0deb19f6a4c751f7d4c603bd7e4a7c8448bd9bdbe022311a1b5ca12a2d4bbdb7a0ccdd9bf500f1047373977212031fcaee2c5972804200e91d122f7103113650ba44c4fda25a8a41023323f3b3da6a42dea77a254eb29739a76a8d66297e2d36d702284fdb2f437f95345363ab6cd34d411edf706e40701263626dd356629e0d8331326ddcf3348bba8406b1a539c661b8203a63cef510b737e5d5fc23f413339e0c72eff8ff39c6b5540da5933da508d4c178253b856054e905ceb75fd5e7ad7b88228956468debd226d0027bb03bbb1db865d78d0afdd826d61f3252d2cef14327ff01371de07f4b8b682d7b8a42c7ba564caadb1b544f4bfab6c2265725e1c3089d36068c0efd48d2fdd28361f77d55cc94eb6a03bcbf6aa6d291e57962523eacc2ebb50bc5b38493b5dcfc1f7b658cf3fb21cd78f85f47c98b8443ce7eb6870843c22c40e0fe2d9e46c6385255fe6b0d614cfa55d97c74a7a57a0cf199b065fbfcba81de4950bfeb19e618d4c7d19766e9d16e385636e4dd594e3f2c759d3f02add560e50b26435b587353ab33927c59318626f4d44cbb81b0f90547647448965f55cfeb353181e3477b11f2cb3668eb99173e2847cf36956b293e934e206e8b6e8527ee618aff21551976b0b55709c9a34bddb170f3e997405b44d52d13f47705629186203485e65f082ff937f2b0cc9c113ec30e865dd73030f944d1df86dafff66f379b8f08a62ef92edad2783a1e02d97951a8b2b95c781eeafe8b08d0c76032042874b32d8fc91949f8a1f177b03eccb0ceaa844ce152b0604974f6191cfb8fe838f954e2a8b7ed0a078c47e367aa0ab5096d3224ed72f6e189be63d984f416144c5dbe42786523c47985e26df1d7ececb2e854bd61054731c68c78ae74f2eee26f4cc9aa7c5f6b515ee763c988752e2771de183872dc6b9489fbfde73146e3d0b145e67fef7564d37f8a332bc2cbae086714dcac0f5960f94f39a238912b74467197ecf399f9068611e09f3f4dfbccd5a800d4fd5d04ab8c14be48883c27804f023d3b87e048e5950b46d5342edac457a24d681a5be272fc432cd60f33bc95106899c3da5b7cd37eae5db6910f002b8bcf8c8484c76d7ecf16785e005c97591ff73d8ae9896ef3cf26a9a8b1369eed3cf1f09b993cc22bfc08f9f51976c165daa13df61fa50ede4ab3013f4c55c7c6ab4c78354f997ade342fe94f50709da086b3f6b60512cff658e8f704206e605e29c10bc865150a5a9d26cbb48f30dd9ce8a2767cf8634e0166ad3c196ca996c057dace849336009339d0157e7c0d5aa16f08600ba68f4904cdfa7866fb488e4149ba2dba9e256972666d2ff03f287d5d8c41c7d4b7b5f56245b110c119227299acaca87cba5cd83822fbbf1f91dd236ca1d0de542055d05846bfb73a91c9c25e85134ef8bd38e95e2d098f8f7b9374aaaf8ce3cf5b51c6f465c78995b1985aeabd6837d0694574bb66bccecc41ff843819fd4a8ba5d9e0d43f846d7217b3a8651a90eb172229e4a3d8ec3aae1fc6a920736d268681e844e215240bbab1b597f038e9278bdd5fe5f8232c82980a4c5c270e46db80eb7e82a9a916a8135d535a06f23f76b0128d21aaf4e3e1c7cb80a07476ae8429583e3e44434f184374bdfd9e5b9336c36e5b23ae4adba3453658398f09512fa13d4b130a9ab627f8d616080fbadc3a94e929763a9e7c5e41fbef6e929da7787032f3592debec5f9de217055a1074a67545cd0d3738c229bf461c016508e97652f909c839871a5f7898170b4ade8fe906c6fcb174d242ad9e6be8bda30fcb09cee822adbccdb74cbb5237418d11c4698fdea4c2c0339f69b236ed0c915c45553b6a524c0add475c0e0a3dbc59d01ac247d8ba856ce8fddcf5be4f33e77757cc73077b1f89bf1fc17eccfa8af0d2b0d530e2645b413531fa0aee6e4aa868d2bd01e75a23649670d323971a67d7f68acb605848fd51b02164a87ff4bc7a0e3fba60397180f0c1ae8ca30e5a7ded66774a1d661a5a2a5d4d3431ba4623d83f999946786d297e614c0aff9afe2ed4db81967f3ab829472a7405787973b68ec3b1824fa7b91fdf1385707eb05c4d8863996fdd953d4de654b7a0dececfa3fe0c96f1aed883ce63e464eb8668dcdc693fc77e0998f9acf2099c88cb75f2c87a434e8b8f8610017f6f5ab9a8d6fa39f75d3d8597e441950429fda77bd3cf94cdded9a91145c4070871446082e4b986b94e04c20f88428a7ef68c66fdeb3daa6e2aae6ef29db902cc2c90286ecf80adb90ac64079abe0c93c834e9f3d0241a53a8db6802092b958c108bed7aba33958f810a0a316476c158a21654d15131b4281c54116714a391d2ce61d938c5c2869d70af946ec8a2e2559ed0c4cac69a78af14a9d0dcbf5aafc7f4e5907f5f752365cb1671576965e654c9af3d4154be7252d1bb70271edcd51d25dc29762dbc37ab8be3a6194dcd95404c3055d4c0f50d0c426e7c2c81bc38191357cfb159ccc5dff91335a5ff9fc32094f87aa11de926be5ba6f68ab44ac0437b821855ed18df283468dd364b90c5aafebcd9ca598358cc79ec5bdb89b4d7f80f0898b9982e929b542854eeeee430b3fda9b03a69ee61e8f92b467bb19407c118955f4ff14e67888fe13b535ff4f2de51eda2e94577d23bd840485289c49ad86f3cff9e17453deb6fee7365ed555798c5072610e98bfdaa54d65dc0d789366e2d17d635752df7512ac9788ff2bcfa6061ab31351db900fd12ec76c5e5799a7e469be7b09a6e4a85da22fcde02050fc21b14863e664320aaf2f7e790cc0b9b30bcd7e177b2fa3cf1bb7d7175abadb2f01f3c27b1757883d88e8789a9b165dda25a34fa86b968d4e374b610528d265fddeee79beb55bb0949d892a89c2cd137a93555a8745100d67376740dea3637df33ebbcda9fec2980cc634d8dd8b2dc8eb7e256c4c5d01d5cdf0610ea342e5d923d43891585a5936d7364c34342772bcb6efa4b6216c836b4f5e4710cdf0b4c64285ae02217af1dd50cbc779a34b5600ce9d3fc873058e916480eb09ac797a315dd774ab4bddb11911bd80a8087c22dc5dead0c10555b81f6928ba0f75544003126d7f386b4e850d4dafc10b8a16a83e9bc2a64321d2d279491a976f41083f10d63b2308eb8d5b5c2f2604325060998921f4e088f4172fbd3a1b4fc284c078e643d4610a932a966235846cce486193d808052f974ec73fb15f48723f5524b94ba7b731effc1203217e98c4492d0ad3dee54c37e67fa607921d4604ae91102122600587396fc33c352a72fe79c2cc60b5404101432075c24d40cb00966daa5471ddae7382a85bbdd2a9e4d833c6bf16777a694133b6f516b7366879a6942e23a4b606674ec8000eef50f9bdbfcc129cb8fdfab7336102f8e450a749aaee5c47a0a0aa5adc7e0b4b1b59035698b237b6e9b25e50f034deb6eace6432df96e6cf2e1c2885e467943bc6af0bed11ca9ea4cc149bc364377024fd863bb386418965d623aa9cd4d779400626cd1f2c97dd51ec97c9fb2cfa6fd13a031e0d3a9125b60315727751878cc70a6277712bdffd63dfc92541d451e60a0b84d22be5bd742139de12b832e91a674f927e0fde8dbcce61301175acf99306bb7f20b892395d5bc0009684abdcd3e802413cb47dbb61d9e43e2d839ea49f76fb50d25a05d47da78fc734037c6a77fe0fc62943ab3183f82ea780fe2bee4ed8fc19f555dd5ca925044658d30ff912a5ab44bf92f37951419e381b50fe93d80d6626b84a9c532f809fe7b9b85132339b05aa957027260c15331ec61697397fe1090bca0209eba800eabdfaffb95a9e059e110a9876f70993760db0dea750eb0f8b24f61cab127f54e751b2ade4ef295d85c95da556c1978a246363730fea660ab48711d6bba6021ebfc41c7546fabb78f2e793c615b6b40213fde6437ca74fac30232c86f", 0x1000}], 0x2, &(0x7f0000001400)="64d386dbd12d6f", 0x7, 0x5}, 0x800) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xc0042, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f00000000c0)={0x1, 0x3800000}) r3 = request_key(&(0x7f0000000180)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='selinuxwlan1\x00', 0x0) keyctl$revoke(0x3, r3) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @loopback}, {0x1}, 0x2, {0x2, 0x4e20, @multicast2}, 'bpq0\x00'}) 03:38:57 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) finit_module(r3, &(0x7f0000000040)='ppp0.(\x00', 0x1) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:38:57 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r0, 0x2000000000000015) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x83) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000000)=0x35, 0x4) 03:38:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x0, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x58080, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000002c0)) ioctl(r1, 0x1000008912, &(0x7f0000000700)="ec88893a10000000f6ff243eebdf43eb8dff5b00000000000070399aebcdf46a20411431a738a0cc346868eaba35e1698a223c24d19b46caae9cbdb4816d6559e5bffb15b867a8d44acef800000000000000000000000000000000") ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x1, {0x1, 0x4b2, 0x4c3, 0x9e06}}) r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x42080, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') socket$l2tp(0x18, 0x1, 0x1) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="b4407c00", @ANYRES16=r4, @ANYBLOB="20002cbd7000fddbdf25110000002c00030008000500ac1414aa080001000200000008000400040000000800030000000000080004000400000008000800080000000800040005000000080004008100000008000500ac141426080007004e21000008000400c00f0000000000000000000000000000"], 0x7c}}, 0x4) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) dup2(r0, r2) 03:38:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x0, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xffffffffffffff8b}], 0x1, 0x0) ptrace$pokeuser(0x6, 0x0, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) rmdir(&(0x7f00000005c0)='./file0\x00') tkill(0x0, 0x5) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote}, &(0x7f0000000580)=0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000680)={0xb38, 0x101}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000440)={0x2}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000500)={0x7fffffff, 0x7, 0x4, 0x10, {0x0, 0x2710}, {0x0, 0x1, 0xea, 0x320d, 0x1, 0x9, "2b05c3e3"}, 0x9, 0x7, @userptr=0x3, 0x4}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) bind$llc(r1, &(0x7f0000000640)={0x1a, 0x307, 0x5, 0x4, 0x62, 0x6}, 0x10) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) [ 772.242150][ C1] net_ratelimit: 20 callbacks suppressed [ 772.242161][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 772.259387][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 772.322723][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 772.334180][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:57 executing program 0: openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x10000, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x8, 0x0) getsockname$packet(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f00000034c0)=@sco, 0x80, &(0x7f0000003700)=[{&(0x7f0000003540)=""/187, 0xbb}, {&(0x7f0000003600)=""/253, 0xfd}], 0x2, &(0x7f0000003740)=""/165, 0xa5, 0x10001}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, 0x0, 0x0, 0x1000}, 0x5}], 0x5, 0x0, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x812b2ddfb9cabd4b, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030305596f3bb11069f843d6c06c41115fd9c3030346532302c616363657373673d3078303005fbff5a0045169a30303030fc322c616669643d30783030303030303031303030ad153030302c63616368a1096d6d61702c63616368653d66736361", @ANYRESDEC=r1, @ANYBLOB=',\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000002c0)=0x16, 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:38:57 executing program 2: socket$netlink(0x10, 0x3, 0x2000) set_mempolicy(0x0, &(0x7f0000000140), 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440), 0x4) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = syz_open_dev$dmmidi(0x0, 0x442e, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000600)=""/190) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'bridge_slave_0\x00', 0x3}, 0x18) ioctl$KVM_RUN(r0, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x800000000105082) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x10f) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) sendfile(r2, r2, 0x0, 0x10200000e) 03:38:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x83) 03:38:57 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x0, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8000, 0x0) 03:38:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xfffffffffffffe69}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000540)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000640)={{{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000580)=0xe8) getsockname(r0, &(0x7f0000000740)=@hci={0x1f, 0x0}, &(0x7f00000005c0)=0x80) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000880)={0x0, @local, @local}, &(0x7f00000008c0)=0xc) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000900)={@loopback, @dev, 0x0}, &(0x7f0000000940)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000980)={'vcan0\x00', 0x0}) accept$packet(r2, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000009c0)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001080)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000001180)=0xe8) accept4$packet(r2, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001200)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000001240)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast1}}, &(0x7f0000001340)=0xe8) getsockname$packet(r2, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000001400)=0x14) getsockname(r2, &(0x7f0000001700)=@ll={0x11, 0x0, 0x0}, &(0x7f0000001780)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000017c0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000001d40)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000182}, 0xc, &(0x7f0000001d00)={&(0x7f0000001800)={0x4e8, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0xf8, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r7}}}]}}, {{0x8, 0x1, r8}, {0x114, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x8, 0x0, 0x100, 0x5}, {0x9, 0xdf, 0x0, 0x6}, {0x0, 0x6, 0x40, 0x400}, {0x2835, 0xffffffffffff8000, 0x80000000, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r10}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x9, 0xa1, 0x7}, {0x5eb, 0x81, 0xe38, 0x3}]}}}]}}, {{0x8, 0x1, r11}, {0x1a4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r12}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x1, 0x5, 0x6, 0xcd}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xa91}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x3e1e}}}]}}, {{0x8, 0x1, r14}, {0xc0, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}]}}]}, 0x4e8}, 0x1, 0x0, 0x0, 0x48014}, 0x14) r17 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x2) r18 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r19 = dup2(r18, r17) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r19, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r19, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) ioctl$KDADDIO(r19, 0x4b34, 0x100000000) 03:38:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x80200, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7001}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x183000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 03:38:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x7, 0x4, 0x470, 0x0, 0x248, 0x130, 0x388, 0x388, 0x388, 0x4, &(0x7f0000000040), {[{{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, @mac=@broadcast, {[0x0, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}, 0x3, 0x0, 0x7fff, 0x6, 0x3, 0x9, 'ip6gretap0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x10}, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0xb96, 0x80000000}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x20}, @remote, 0xff000000, 0xff0000ff, @mac=@broadcast, {[0xff, 0x0, 0x0, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0xff, 0xff, 0x0, 0xff]}, 0xffffffffffffffff, 0x1ff, 0x0, 0x2, 0x6, 0xffffffffffffff35, 'veth1_to_bond\x00', 'nr0\x00', {0xff}, {0xff}}, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x4c, 0x2}}}, {{@arp={@remote, @rand_addr=0x34, 0x0, 0x0, @mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0xff]}, 0x3, 0x8, 0x1, 0x5, 0x1, 0x3, 'veth0_to_bridge\x00', 'bond_slave_1\x00', {}, {}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @rand_addr=0x4, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4c0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x40000000000000) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 772.961985][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 772.968043][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:38:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x3, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x35}, 0xb) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x109882) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@null=' \x00', 0x2, 'ip6erspan0\x00'}) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x0, 0x80000) 03:38:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:58 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) vmsplice(r1, &(0x7f0000001500)=[{&(0x7f00000013c0), 0xfffffd90}], 0x1, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x4c00000000000000, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000100)={r3, 0x1f}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 03:38:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000500)) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) dup3(r3, r3, 0x80000) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:38:58 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) [ 773.442005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 773.447926][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 773.462050][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 773.468098][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:38:58 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000540)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x800000d) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4d63a8fe5feaf65060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e414000000722ddf1300000000000000000000000000965aecffffffff000000007b754965"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000500)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) dup3(r4, r8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002000000000000000000000000000100000004d20206030000000020"], 0x20}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400000000000117, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}}) listen(r8, 0xfffffffffffffefc) 03:38:58 executing program 1: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:58 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 773.605762][T10489] bridge0: port 3(gretap0) entered blocking state [ 773.631493][T10489] bridge0: port 3(gretap0) entered disabled state [ 773.657085][T10489] device gretap0 entered promiscuous mode 03:38:59 executing program 1: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 773.718557][T10489] bridge0: port 3(gretap0) entered blocking state [ 773.725941][T10489] bridge0: port 3(gretap0) entered forwarding state 03:38:59 executing program 0: r0 = memfd_create(&(0x7f0000000340)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) write(r0, &(0x7f0000000080)="b156d417452c8f6d46edb3b1077f2abaa85e3489c66107abcc617d9aeb42aa515f23c9150bfdba5fa1be4e0415cb2c2d4a1cdff5aba4a235b20c217a", 0x3c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) sendfile(r0, r0, &(0x7f0000000200), 0xff8) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000001, 0x10040) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r3 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) stat(&(0x7f0000000680)='./file0\x00', 0x0) clone(0x2002001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='Z\x00') perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:38:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000680)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x7f, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4008004) 03:38:59 executing program 1: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000540)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x800000d) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4d63a8fe5feaf65060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e414000000722ddf1300000000000000000000000000965aecffffffff000000007b754965"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000500)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) dup3(r4, r8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002000000000000000000000000000100000004d20206030000000020"], 0x20}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400000000000117, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}}) listen(r8, 0xfffffffffffffefc) 03:38:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x6) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x4) 03:38:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16c01326, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() r3 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r2, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000640)={0x2, @raw_data="e416ab0ee2b7f1e460af80d6508a773551cfb1c9b0b69803ef0f0ac570a85a42450dfdb292c32b7061594b1da81147e13d6d38064d579dec69833c4ac41baf263de05992a099c323339ecc32d81df57f21f24e90dc147fc1fed62535ef2ec383b6d0418940f51f6f04cd313238fce17f8325b74aec189c5be7ca8f91658a73b754603f238b26fd3ac765ee2e87dedc91dc2319720121bd2d9c75209c71b4f54d0718db0f034e8e424888fa5b519c224129a3360ec135d6afe69305b9d61592be6ee988389fca2f57"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001000)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000001100)=0xe8) fstat(r0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() r9 = getuid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0xc) sendmsg$netlink(r4, &(0x7f0000001340)={&(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000fc0)=[{&(0x7f0000000740)={0x2bc, 0x30, 0x306, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1b8, 0x1f, [@generic="df7e46d1d3ac1213a4a1ea221bf3b80c9d8aa57761e8ba343a78387f1402a9c27217304a89397634f449315b688673c7cc11f7b9803613a8497e2a022e4289406ce70362cdc9b53c1c605e5cdb9917f38487f6c0f8f02685e2ba30f473076cf16a9d9b913661e05806be9e0273706bf47991135f53681c6bca3b3f46d97b4d7c7addce1f9e091008c2dfbd779812c7ca1fa70edbbccb1c41ef14e652c222f05ad4bc9c1baa6e93af2bb70e8fbee6d552192df4f0443d298b6e00a48ca114f546baaf", @typed={0x4, 0x62}, @typed={0x8, 0x6c, @ipv4=@loopback}, @generic="070d4b375df3af7d598a086616fe6017374374d4efd95f233ec79ebe27ac376e3e4b23a9638238455398d2c87c475c2805492eb10e42ca87a3ee9b5399c05a27e824eb459a6c25fa87a0042052149467df913a28fc8be79eea7899c01b476b23cd74a24eabed8996a35085a96a3c589fa36326b120dd516ae6a4c4406befa0a56493734421a938ea9c2734461891e0db070d25c77f2f5a0020e919f8d1edf56a4b4944efcf021f355dfba6434ba551baca4b4f3bd056f2c42e3b592e49fdf332e6fae09aaf183842b9e2739c661570882c22fe05483215571ccc27df3ef51fbef38254"]}, @nested={0x80, 0x28, [@generic="d75f86fda7c540ae3596ae00287b399bb8070b5f71bef6d2b648e4a6b924a179688b107a3b5b705ecc1b89a2c7", @generic="e2b3d310754f00dea0ca1050666911acdfa770d1c3ff1c648e8fc30e83aeab46ecab30e0adc93f5edc30c90f3b1b6e1d5577719713da5877fca05f659401c79b90ee6565", @typed={0x4, 0x87}, @typed={0x4, 0x96}]}, @generic="7d986642a4f7f2b0fd7cfa48652b8d0a935d7031feea990a21a4d062ac7f98a5e384c97f3df8c9b9937655de63292c557cde121656e7898256480645246d4ed494440ab7373f3223bb796b58ba8ca6d98d4ada7e6791701029683ec52ecd5a8878f41e8d9ba1da697638", @typed={0x8, 0x21, @pid=r2}]}, 0x2bc}, {&(0x7f0000001480)=ANY=[@ANYBLOB="140100003100000028bd7000fcdbdf258c0ce6c36ac260cd165705dff27c4641b0562e011934cc010565943e072c3810f4f20b25a125611ff713ec8541a07ba4e242d11e3a76c2bfececc94af0e34f67ad94ff752ba1aecf8ac357b10105077564f418fedf04c3543fc105281c48c52e2f0cc5253537481fb13f14a26caa583496a1bd6fc7c71851e6c17953ec184de22686b4f3b848b6cb6a109491c1a9f0b5c014ff8575bff17cc8df68a30c1015f9aa955023f08061c143701f26a6ceb0b060c6ed78f76abbd814909c0a603eabc3a92d4b3d20be1fa010ca5aac519d85ddbfad35908519e60dcbfbda8a5f516da4d474abb4d96ed7cce817313a530595d95198bfadc8cb8fa9b908005900", @ANYRES32=r2, @ANYBLOB="3fb0c1653e68fbd7c29e9c4df4be957ab0d459acfacece44b6aa67fed71b1c03cd5e447440131009e96a92d823d5369e8acc7be4f0807317e32aa7f522c74c6f9425af0b920913edc7c72f787d219e462590dce1da6a6a36cdb8b94cb9624baa5c9d0b18d468a51c1bd8d603e84c14207cb0c513a73e9e5307e7c17b4230d2489939d495980321a898ea97952dbf7d9be7d2"], 0x114}, {&(0x7f0000000b40)={0x358, 0x13, 0x100, 0x70bd29, 0x25dfdbfd, "", [@typed={0x8, 0x95, @pid=r2}, @generic="a41f1cdd892645d5337de3be8092d589088c4f0e67013c1cea2afb2124cd8ba7cee67f39fab1b31538a33f9fa6f32c982b9840b9a4cda5090c1ecda4a2312fb9dce341e8aa1bf7a7c61a26205684b52789fd94a30a6a2ae0c9a5c2879032200f85b688af9073da24535fb33412ab1293ea50917f64c2acaf68909344f7b65e1cf545cb4386df3a0eb3cac48e1904a9a4d750b3c1a9ae52bc0a391bebff7cb34a", @generic="91ba590556ded7848f51df3db497d12af08ac7f0c4be556b6d7a4098290327262c03b77f02cfdcdd7a05fcddd3fa48653e1cd5c5aaaf47dbcff8726a9162f8977588317404698369a1e6977e00dac5a0603e0a80541066664c07ce8f247afcfd729b375e8b", @nested={0x2c, 0x56, [@typed={0x8, 0x25, @u32=0x5dd}, @typed={0x8, 0x1d, @pid=r2}, @generic="80522f7eb41a9e377ea7d22b3d8d1ea3665bca2fc5"]}, @generic="53e542add39b1eb45f22", @nested={0x1f0, 0x81, [@generic="d51efd0acfac19f96a8cfd74899539957479ce878f94372f631564db51", @generic="c2f615b7b49b0bcb61a8a535b0a20e93b296023a0a4df78bf57544187a31528bca5d05a67af2641d271acdacaca96d680b1975ea06794b811fbd3f289b62f5375f", @generic="e10b28b2082f74911448f1488aca159f246e7357176078e7db43a8a07c2894a35fdbf466bb79a1882095f84850102e27fba11781d0655ef301380423d44f71553aade24c3c2797a19f0c646876", @generic="3a67c70744ad5bd9069ace17090f162daf842b24c2e8102c4b100e68dd14a985f9e2f20a095ef052862dfd9803293a3704c148e83f0f46b37f1f062357833f86eb83ed38aa37e12d6fd4e251f3b7fc3e8567f6113476726403e7c4dca9242c650c0bc8032466ae2241153d077bf3b2c93842aa6fd2a3b50bcf7ef39dd903afba845aa417e92e4c4767e05beb77f37fad5502f5bda61c959a9d3059db895f011011a4d22ec3eaa25edfcdb8", @generic="c9055ee09e9fe0d2f252d3aef5df87f1ab85108ebb91439c746c477364e68d550e9c7e5e7c2622dcef92ec84e780f12fe93d51b197ffa0d765a105d4e0febeb6a1e88100f8f55954f4afd23fed9bf4fe40fb1c2b72a1a2a89512e2383668909c3fbf62ba6996e3212860d6e36dc8606f4d3202752fda6b9eb8099fb5a17060758a32b66de75c8d72ffd7e9042ed85ea3897842"]}, @typed={0x14, 0x4e, @ipv6=@local}]}, 0x358}, {&(0x7f0000000ec0)=ANY=[@ANYBLOB="cc000000150001002dbd7000fb03000000000000008f6d14fb445440c1c355e1952c907305f8b7f7c40e0a215ddefabb81bc7d690a84b420a436f482318914b4f7092c52a1ce3300080000000000004e2ef9876ad0bd2a9e3dbac05e2bf418632d6ced1a589a950f02b445ae44ac44efb8d69da85f211b591c3ae8d1250f5606167d908f19ea76ea729b66f569c43e10b2ddf7d6642fb6cfbe196e84124a723ceb1734a1a762cd8217b3987d8f11c7764cc7154c220745dd7bd1163aa95ad380c032a53b632d04005c000000"], 0xcc}], 0x4, &(0x7f00000012c0)=[@cred={0x20, 0x1, 0x2, r2, r5, r6}, @cred={0x20, 0x1, 0x2, r2, r7, r8}, @cred={0x20, 0x1, 0x2, r2, r9, r10}], 0x60, 0x4}, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r11 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r12 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r3, 0x26) r13 = dup2(r12, r11) pread64(r3, &(0x7f0000000500)=""/144, 0x5cca5a8944e41ad8, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r13, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x30}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000001380)=ANY=[@ANYRES32=r14, @ANYBLOB="500000000ae2a66a507d5ca0354a91b7ec151a5f482dd1ee3c9a65dd969417d55b2fea93b63d529e9a8502218484022e04fd7cae4fc2ff9a605a1be4ca7b8f9ca160277e7d8b48b2a8416475706925ae1989202bc533424b862f38056b417e0afc3de51bdf34918e3101929a1d1a9912df08e80901e492a8bbcc63df03655a7fe03aff88006c63e9a5ea503d07a7fd3e739b5cb0c2d620174583811cbeb90e154041bac2aafb345de6eff6878bff7519db32645ea5f67bc285ccc3480cb59b3840"], &(0x7f0000000400)=0x58) ioctl$KDADDIO(r13, 0x4b34, 0x50) 03:38:59 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:38:59 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000540)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x800000d) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4d63a8fe5feaf65060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e414000000722ddf1300000000000000000000000000965aecffffffff000000007b754965"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000500)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) dup3(r4, r8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002000000000000000000000000000100000004d20206030000000020"], 0x20}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400000000000117, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}}) listen(r8, 0xfffffffffffffefc) 03:38:59 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:38:59 executing program 0: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x0, 0xfe02, &(0x7f00000000c0)}) splice(r0, &(0x7f0000000080), r1, &(0x7f00000000c0), 0x10000, 0x3) syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x9, 0x400200) 03:39:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x77359400}}, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) tkill(r1, 0x2000000000000015) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x50) 03:39:00 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:00 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) fcntl$getownex(r1, 0x10, &(0x7f0000000440)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000540)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000640)=0x0) sched_setaffinity(r2, 0x8, &(0x7f00000004c0)=0x800000d) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7450000bf7ce676b30007000008000000b4d63a8fe5feaf65060000ffffffff2d020000000000e556b35eb800650404000100000004040000850000001f000001b700e414000000722ddf1300000000000000000000000000965aecffffffff000000007b754965"], 0x0}, 0x48) socket$inet6(0xa, 0x2, 0xfd9) ioctl(r3, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000500)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r4, &(0x7f0000000c40)=ANY=[], 0x0) close(r0) dup3(r4, r8, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002000000000000000000000000000100000004d20206030000000020"], 0x20}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000184000)=ANY=[@ANYBLOB="020100021000000000000600000000000800120000ffff00000000000000000006000000000000000000800000000000e00000010b00000000000000000035000000000000000000000000ff00000000030006000000000002000004000000bb000000000000000003000500000000000200423b000000000000004000000000"], 0x80}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f0000000180), 0x400000000000117, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000300)='/dev/radio#\x00', 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) futimesat(r10, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={{r11, r12/1000+30000}, {0x77359400}}) listen(r8, 0xfffffffffffffefc) 03:39:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:00 executing program 1: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:00 executing program 0: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0', [{0x20, '#em1#+\x00'}, {0x20, 'vxcan1\x00'}, {0x20, 'systemself'}, {0x20, '#em1#+\x00'}], 0xa, "0569a3551e1edf7fb1b01c85178661195218a469be50aafc18609411db3573"}, 0x4d) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x604002, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x40000000000085) rt_sigtimedwait(&(0x7f0000000140)={0xb1cd}, 0x0, &(0x7f0000000100)={0x77359400}, 0xa2) syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x141000) 03:39:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vcs\x00', 0x300, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000580)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000014000/0x3000)=nil, 0x3000}, &(0x7f0000000500)=0x10) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000014000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, &(0x7f0000000640)="660f73fd000f20e06635040000000f22e00fc7aa006066b9010100400f320fc72f66b9ed0800000f3265660f3a60a5000066f3d2f90faeaa005066b9730900000f32", 0x42}], 0x1, 0x0, &(0x7f00000006c0)=[@cstype3={0x5, 0xa}, @cr4={0x1, 0x400}], 0x2) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x650, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$KDSETLED(r2, 0x4b32, 0xffffffffffffff81) mmap$binder(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8001000004, 0x84010, r2, 0x0) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:39:00 executing program 1: r0 = syz_open_dev$usb(0x0, 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:00 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000039ff8)={0xffffffffffffffff, 0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0xfffffffffffffcbc) connect$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xfffffffffffffed2) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) write$P9_RLCREATE(r2, &(0x7f00000000c0)={0x18, 0xf, 0x1, {{0xc, 0x0, 0x2}, 0x3}}, 0x18) symlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') 03:39:00 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x0, 0x2) ioctl$TIOCNXCL(r1, 0x540d) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000240)={0x61}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000013c0)={'filter\x00', 0x1000, "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"}, &(0x7f0000000280)=0x1024) r3 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast1, @in6=@loopback, 0x4e24, 0x4, 0x4e22, 0x78, 0x2, 0x20, 0x0, 0x33, 0x0, r3}, {0x1, 0x0, 0x0, 0x95b, 0x7, 0x4, 0x1, 0x42f6}, {0x14b6, 0x10001, 0xffff, 0x80000000}, 0x6e3, 0x6e6bb3, 0x3, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x3b}, 0xa, @in6=@mcast2, 0x3503, 0x3, 0x2, 0x5, 0x7ff, 0x1f, 0x8}}, 0xe8) semget(0x2, 0x0, 0x28) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in6=@dev}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000500)=0xe8) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000100)={0x8, 0x7, 0x26, "e684aa012456b56684874f2b3690caa3397809a3e90d4bc44f0c5a69a74895bfabe1b12445a519ddb9174db6370f2b7363cfffc2c6cf28e5e9b7704f", 0x24, "6d70169ac7178be7fd7122c396380fe3353778cc6e3784a1dda22668948dd3bbc9bf01d5d29bfde09692ab6397ebdcfd30509e49144ccafb2525e550", 0x80}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000002400)=""/4096) sendmsg$alg(r2, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000040)}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x80) write$binfmt_script(r2, &(0x7f0000000600)=ANY=[], 0xfec8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) recvmmsg(r2, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x7fffef59}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, 0x0) 03:39:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 777.602074][ C1] net_ratelimit: 20 callbacks suppressed [ 777.602085][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 777.614534][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 777.620762][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 777.626938][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 777.633077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 777.639255][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xffffffffffffff26, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0]], 0xffffffffffffff8b, 0x0, 0x0}) 03:39:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:03 executing program 1: r0 = syz_open_dev$usb(0x0, 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:03 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x105000) ioctl$VIDIOC_SUBDEV_S_CROP(r1, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x6, 0xffffffff80000001, 0x40, 0x3}}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x20000, 0x0) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000000c0)=0x1c, 0x80000) connect$vsock_dgram(r1, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="02005400000001000000ff072100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa", 0x3c, 0x1c4}]) 03:39:03 executing program 0: r0 = gettid() ioprio_set$pid(0x1, r0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x202400, 0x100) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x0, 0x424880) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x100000001, 0x1, 0x23, 0x81, 0x0}, &(0x7f0000000080)=0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000280)=0x10) prctl$PR_GET_FP_MODE(0x2e) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}}}, &(0x7f0000000180)=0x84) 03:39:03 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioprio_set$pid(0x2, r0, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) r3 = add_key(&(0x7f0000000540)='.request_key_auth\x00', &(0x7f0000000580)={'syz', 0x0}, &(0x7f00000005c0)="0beb190579d5f922710c18bb9bc2", 0xe, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, r3) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) [ 777.747652][T11218] binder: 11217:11218 ioctl c0306201 20000240 returned -14 03:39:03 executing program 2: r0 = syz_open_dev$amidi(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x2004) r4 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r3, &(0x7f0000000400)="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", 0x200) sendfile(r3, r4, 0x0, 0x16300) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={r1, r1, 0x4, 0x1}, 0x10) dup2(r2, r0) 03:39:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:03 executing program 5: r0 = socket(0x1b, 0x6, 0xffffffffffffffc1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="ff0000004f3090ed846848923d316649d3e44ab3916fd000c8d4d3a81fc8b5", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x4, 0xfff}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x280000000010, 0x802, 0x0) write(r3, &(0x7f0000000000)="240000001a0025f00485bc04fef7001c0a0b49ffed000000800008000800100001000000", 0x24) 03:39:03 executing program 1: r0 = syz_open_dev$usb(0x0, 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:03 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = epoll_create(0x6) r2 = epoll_create(0x4) r3 = socket$rds(0x15, 0x5, 0x0) r4 = epoll_create(0x100000006) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f000000e000)) r5 = socket$inet6(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000000d000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000000dff4)) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000c7f000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000000)={0x3}) [ 777.945495][ T26] audit: type=1800 audit(2000000343.349:158): pid=11325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16729 res=0 [ 778.032424][ T26] audit: type=1804 audit(2000000343.349:159): pid=11325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir103377669/syzkaller.b7K8bg/1586/file0" dev="sda1" ino=16729 res=1 [ 778.091417][ T26] audit: type=1800 audit(2000000343.349:160): pid=11325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16729 res=0 03:39:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:03 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0x44) truncate(&(0x7f0000000040)='./file0\x00', 0x8000) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x2) sendfile(r0, r0, 0x0, 0x7fffffff) sendfile(r0, r0, &(0x7f00000001c0)=0xffffffffffffffff, 0x0) 03:39:03 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1000000000000b, &(0x7f0000534000), &(0x7f0000000040)=0xfffffffffffffd0c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/30}) 03:39:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 778.365252][ T26] audit: type=1800 audit(2000000343.769:161): pid=11447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16751 res=0 [ 778.486332][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 778.503741][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 778.561969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 778.568053][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r2, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000980)=0x400, 0x4) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/\x00bd0\x00'], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='devtmpfs\x00', 0x11000, &(0x7f0000000540)='lblcr\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000000000000000f2ffffff5e985772ca4d78f42e2b67dd9b8787e1641921d84c2ee07a3bf809639c767696578a1fdf9640155afc27ebdc738a9331c223449037269f6195a731199199033b8b27aa4eb7e8d63ecdc6c148f1f360066ee416b77515a9601d79b51c4b5b579488ac8c2d56a0e31fc2ade836b236965183aa4dc2aff6e7c841b07523afe270ed34ea84e5be84552b66de9909e481f441f9647a4ad88f000000000000000000"], 0xaf}}, 0x0) 03:39:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x8}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r4 = dup2(r3, 0xffffffffffffff9c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r4, 0x4b34, 0x50) [ 778.748842][ T26] audit: type=1800 audit(2000000343.879:162): pid=11447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16751 res=0 [ 778.789251][ T26] audit: type=1804 audit(2000000344.119:163): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir103377669/syzkaller.b7K8bg/1586/file0" dev="sda1" ino=16729 res=1 03:39:04 executing program 2: setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x402002, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="70020000", @ANYRES16=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x2000c001}, 0x800) r2 = getpgid(0x0) tkill(r2, 0x35) r3 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r4 = semget(0x3, 0x3, 0x50) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000000)=[0x3f3e, 0x100, 0x7f, 0x6, 0x9]) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x5) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000000c0)) ptrace$cont(0x1f, r3, 0x0, 0x0) 03:39:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 778.870476][T11499] bridge0: port 3(gretap0) entered blocking state 03:39:04 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) userfaultfd(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:04 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1f, 0x84000) fsetxattr$security_ima(r1, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="040cc0c452e6291d461d148bd97679e9646281052133"], 0xd, 0x0) setsockopt$inet_dccp_int(r1, 0x21, 0x3, &(0x7f0000000040)=0x2, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000100)=@bcast) truncate(&(0x7f00000001c0)='./file0\x00', 0x200) [ 778.905945][ T26] audit: type=1800 audit(2000000344.119:164): pid=11333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16729 res=0 [ 778.948900][T11499] bridge0: port 3(gretap0) entered disabled state 03:39:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 779.021342][T11499] device gretap0 entered promiscuous mode [ 779.049244][T11499] bridge0: port 3(gretap0) entered blocking state [ 779.056789][T11499] bridge0: port 3(gretap0) entered forwarding state 03:39:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 779.133801][T11608] vhci_hcd: invalid port number 255 [ 779.172566][T11608] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:04 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000640)) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) [ 779.256622][T11693] vhci_hcd: invalid port number 255 03:39:04 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40800, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0xb74, 0x4) write(r0, &(0x7f0000000000)="15000000080000f2ff0000100000000000000024d2", 0x15) [ 779.299541][T11693] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:04 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) userfaultfd(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r2, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000980)=0x400, 0x4) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/\x00bd0\x00'], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='devtmpfs\x00', 0x11000, &(0x7f0000000540)='lblcr\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000000000000000f2ffffff5e985772ca4d78f42e2b67dd9b8787e1641921d84c2ee07a3bf809639c767696578a1fdf9640155afc27ebdc738a9331c223449037269f6195a731199199033b8b27aa4eb7e8d63ecdc6c148f1f360066ee416b77515a9601d79b51c4b5b579488ac8c2d56a0e31fc2ade836b236965183aa4dc2aff6e7c841b07523afe270ed34ea84e5be84552b66de9909e481f441f9647a4ad88f000000000000000000"], 0xaf}}, 0x0) 03:39:04 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 779.499430][T11705] cgroup: fork rejected by pids controller in /syz1 03:39:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7fffffff}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000540)={r4, 0x8, 0x400, 0x80000001}, 0x10) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r6 = dup2(r0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) [ 779.609712][T11786] vhci_hcd: invalid port number 255 [ 779.647993][T11786] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:05 executing program 0: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000540)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x457aee01ca2bc461, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000001400100129bd7000fddbdf250a384000", @ANYRES32=r1, @ANYBLOB="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"], 0xfd33}}, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x4) 03:39:05 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) userfaultfd(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7451600ffffffff2d020000000000e556b35eb865040400010000000404006f1937867ba5bcbc39e1ffaf87f528c65200e4140000000000000000002636999476ff2ee4c788dcd08a75717412404981777a47c0b139d29e849e20f7dcf9edd06fdae0f700f80348201b17bebd3d05378dbd901b0454b3bbdfcb8fe63dce1205e9b42f4be1609f88bd8a845b67139fd0b13acc5345c957209e0c463aeaf2ac480705000000000000000db0c838e06d9459a650c4a6ecdc1b880ef0d0cb3320c06012da6c53a5120bacde541b00a27fc87a5bb7b315fab2c6351266ff9524375058922b4763303edfa5dbceb011748b92fb932a4d66dfe2f605a0df9fc39c0df251e7ee7e5827fd1a8341444edbae9e772bef3d10ef16b893b31f270ff9abb60f724686df36c99997264ee9f80aec3e9d19532767c306ed63d8fc22d36306c1def8aec580669c3801d641be449079470a980e731d1b7340c332c1128732e88142de25d45a9cf8969a0538fc250ee949222f1202beddbaac38a6db36d0f88c5a06b8aebaa02bc17d0a25c6363e93fb77449ede19b471e3250b7ca213691d389966c4bed1f3d1"], 0x0}, 0x48) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r2, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000980)=0x400, 0x4) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/\x00bd0\x00'], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='devtmpfs\x00', 0x11000, &(0x7f0000000540)='lblcr\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000000000000000f2ffffff5e985772ca4d78f42e2b67dd9b8787e1641921d84c2ee07a3bf809639c767696578a1fdf9640155afc27ebdc738a9331c223449037269f6195a731199199033b8b27aa4eb7e8d63ecdc6c148f1f360066ee416b77515a9601d79b51c4b5b579488ac8c2d56a0e31fc2ade836b236965183aa4dc2aff6e7c841b07523afe270ed34ea84e5be84552b66de9909e481f441f9647a4ad88f000000000000000000"], 0xaf}}, 0x0) 03:39:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:05 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xf, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x7, 0x7, 0x0, 0x1}]}, &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) pkey_alloc(0x0, 0x2) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) [ 779.983549][T11903] vhci_hcd: invalid port number 255 [ 780.018923][T11903] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) socket$unix(0x1, 0x5, 0x0) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:05 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) userfaultfd(0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:05 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7451600ffffffff2d020000000000e556b35eb865040400010000000404006f1937867ba5bcbc39e1ffaf87f528c65200e4140000000000000000002636999476ff2ee4c788dcd08a75717412404981777a47c0b139d29e849e20f7dcf9edd06fdae0f700f80348201b17bebd3d05378dbd901b0454b3bbdfcb8fe63dce1205e9b42f4be1609f88bd8a845b67139fd0b13acc5345c957209e0c463aeaf2ac480705000000000000000db0c838e06d9459a650c4a6ecdc1b880ef0d0cb3320c06012da6c53a5120bacde541b00a27fc87a5bb7b315fab2c6351266ff9524375058922b4763303edfa5dbceb011748b92fb932a4d66dfe2f605a0df9fc39c0df251e7ee7e5827fd1a8341444edbae9e772bef3d10ef16b893b31f270ff9abb60f724686df36c99997264ee9f80aec3e9d19532767c306ed63d8fc22d36306c1def8aec580669c3801d641be449079470a980e731d1b7340c332c1128732e88142de25d45a9cf8969a0538fc250ee949222f1202beddbaac38a6db36d0f88c5a06b8aebaa02bc17d0a25c6363e93fb77449ede19b471e3250b7ca213691d389966c4bed1f3d1"], 0x0}, 0x48) r1 = dup2(r0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) openat(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r2, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r0, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0xa, 0x3, 0x8) r6 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000440)=r7) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r6, 0x1, 0x0, &(0x7f0000000980)=0x400, 0x4) ioctl$RTC_WKALM_RD(r6, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r8 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r3, r8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/dev/\x00bd0\x00'], &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='devtmpfs\x00', 0x11000, &(0x7f0000000540)='lblcr\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)=ANY=[@ANYBLOB="000000000000000000000000f2ffffff5e985772ca4d78f42e2b67dd9b8787e1641921d84c2ee07a3bf809639c767696578a1fdf9640155afc27ebdc738a9331c223449037269f6195a731199199033b8b27aa4eb7e8d63ecdc6c148f1f360066ee416b77515a9601d79b51c4b5b579488ac8c2d56a0e31fc2ade836b236965183aa4dc2aff6e7c841b07523afe270ed34ea84e5be84552b66de9909e481f441f9647a4ad88f000000000000000000"], 0xaf}}, 0x0) 03:39:05 executing program 0: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x168, r2, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x34f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6bad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x44000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)={0x80000004}) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xffa93e08d595997c}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x20c, r2, 0x211, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0x3c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x17f9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe68c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffe94}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffff}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400000000000000}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}]}, 0x20c}, 0x1, 0x0, 0x0, 0x8800}, 0x800) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="700dcbefdd98f923aa21a0b65a6fbbec4c7f6219bd8f0b2e9358e67113412edf0aaf42c1099c5ff676fcbe181a266191a5a2518256fa71c01ff333691118b615edb17d9c9dd362ab87deb164a1526aaa3642b3b3a76e8637a993d4ab1f06c4227e6307ba86a290d54dc545cf4a022e6223cf45b6946c6b55802b11e3d597f5ddc8355492bb5d1f03032096a80bc3f920822b55d6e081d04549eb34031e4be42b9ac25ebde81c0e63bd3e97c9", 0xfffffffffffffff0}], 0x1) 03:39:05 executing program 1: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 780.336742][T12050] vhci_hcd: invalid port number 255 03:39:05 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 780.400135][T12050] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:05 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='trusted.overlay.origin\x00', &(0x7f00000006c0)='y\x00', 0x2, 0x2) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x41004000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r3, 0x404, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x200040c0}, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000ac0)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}], 0x1c) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000b40)) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84012, r2, 0x23) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) epoll_wait(r6, &(0x7f0000000a80)=[{}], 0x1, 0x0) ioctl$KDADDIO(r6, 0x4b34, 0x50) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x9, 0x3, 0x2b8, 0x120, 0x0, 0x0, 0x120, 0x120, 0x220, 0x220, 0x220, 0x220, 0x220, 0x3, &(0x7f0000000700), {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x40, [0x5, 0x0, 0x7, 0x7dd3, 0x8, 0x3], 0x6, 0x2ca}}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@uncond, 0x0, 0x98, 0x100}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x4, 0x5, 0x20, '\x00', 'syz0\x00', 0x7}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 03:39:06 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) socket$unix(0x1, 0x5, 0x0) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:06 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) userfaultfd(0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0xc0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1000000000000001, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)='W', 0x1, 0x40844, 0x0, 0x0) 03:39:06 executing program 1: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 780.772509][T12176] vhci_hcd: invalid port number 255 03:39:06 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) socket$unix(0x1, 0x5, 0x0) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) [ 780.819632][T12176] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000040)) 03:39:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:06 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 781.051816][T12281] vhci_hcd: invalid port number 255 [ 781.072216][T12281] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:06 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x10001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r0, 0xb) mlockall(0x100000000007) msgctl$IPC_STAT(0x0, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000000)=0x2, 0x4) 03:39:06 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) socket$unix(0x1, 0x5, 0x0) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:06 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:06 executing program 1: syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:06 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) [ 781.340091][T12317] vhci_hcd: invalid port number 255 [ 781.378121][T12317] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:06 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @bcast, @bpq0='bpq0\x00', 0x2, 'syz0\x00', @default, 0x8, 0x6, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r3, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x5c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80b3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x507774d8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xf92c}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000003c0)=ANY=[@ANYBLOB="16fe34d9483f275d6b55b250f72de4ca9c32a825fda7e0f8b0dcecb4c427d4e6a4cdb703342b80b81800"]) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x40000000005, 0x84) r4 = syz_open_dev$media(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r4, 0x3) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000200)={0x1, 0xfed, 0x3, 0xfff, 0x3f}, 0x14) r6 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r7 = semget(0x2, 0x4, 0x10) semctl$IPC_RMID(r7, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x100000000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 03:39:06 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:07 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 781.654170][T12410] vhci_hcd: invalid port number 255 [ 781.659664][T12410] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 [ 781.706176][T12440] FAULT_INJECTION: forcing a failure. [ 781.706176][T12440] name failslab, interval 1, probability 0, space 0, times 0 [ 781.730880][T12440] CPU: 0 PID: 12440 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 781.740060][T12440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 781.750154][T12440] Call Trace: [ 781.753480][T12440] dump_stack+0x172/0x1f0 [ 781.757843][T12440] should_fail.cold+0xa/0x15 [ 781.762480][T12440] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 781.768361][T12440] ? ___might_sleep+0x163/0x280 [ 781.773450][T12440] __should_failslab+0x121/0x190 [ 781.778421][T12440] should_failslab+0x9/0x14 [ 781.782948][T12440] kmem_cache_alloc_node+0x264/0x710 [ 781.788264][T12440] ? lockdep_hardirqs_on+0x418/0x5d0 [ 781.793668][T12440] ? trace_hardirqs_on+0x67/0x230 [ 781.798715][T12440] ? kasan_check_read+0x11/0x20 [ 781.803643][T12440] copy_process.part.0+0x1d35/0x79d0 [ 781.808964][T12440] ? get_pid_task+0xc9/0x190 [ 781.813935][T12440] ? find_held_lock+0x35/0x130 [ 781.818720][T12440] ? get_pid_task+0xc9/0x190 [ 781.823329][T12440] ? __f_unlock_pos+0x19/0x20 [ 781.828024][T12440] ? find_held_lock+0x35/0x130 [ 781.832819][T12440] ? __cleanup_sighand+0x60/0x60 [ 781.837780][T12440] ? lock_downgrade+0x880/0x880 [ 781.842659][T12440] ? kasan_check_write+0x14/0x20 [ 781.847626][T12440] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 781.853201][T12440] _do_fork+0x257/0xfd0 [ 781.857386][T12440] ? fork_idle+0x1d0/0x1d0 [ 781.861816][T12440] ? fput+0x1b/0x20 [ 781.865648][T12440] ? ksys_write+0x166/0x1f0 [ 781.870173][T12440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 781.875656][T12440] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 781.881228][T12440] ? do_syscall_64+0x26/0x610 [ 781.885961][T12440] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.892142][T12440] ? do_syscall_64+0x26/0x610 [ 781.896867][T12440] __x64_sys_clone+0xbf/0x150 [ 781.901577][T12440] do_syscall_64+0x103/0x610 [ 781.906193][T12440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 781.912100][T12440] RIP: 0033:0x458209 [ 781.916004][T12440] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 781.935636][T12440] RSP: 002b:00007fce6754cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 781.944067][T12440] RAX: ffffffffffffffda RBX: 00007fce6754cc90 RCX: 0000000000458209 03:39:07 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x5) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:39:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 781.952313][T12440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 781.960322][T12440] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 781.968318][T12440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6754d6d4 [ 781.976313][T12440] R13: 00000000004be519 R14: 00000000004cec60 R15: 0000000000000004 03:39:07 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockname$packet(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1000000000000f, 0x3) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00']) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:39:07 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:07 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget(0x3, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:07 executing program 1 (fault-call:2 fault-nth:1): r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 782.212441][T12462] FAULT_INJECTION: forcing a failure. [ 782.212441][T12462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 782.229414][T12461] vhci_hcd: invalid port number 255 03:39:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 782.264063][T12461] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 [ 782.334389][T12462] CPU: 1 PID: 12462 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 782.343569][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 782.353655][T12462] Call Trace: [ 782.356981][T12462] dump_stack+0x172/0x1f0 [ 782.361353][T12462] should_fail.cold+0xa/0x15 [ 782.365990][T12462] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 782.371832][T12462] ? ___might_sleep+0x163/0x280 [ 782.376814][T12462] should_fail_alloc_page+0x50/0x60 [ 782.382045][T12462] __alloc_pages_nodemask+0x1a1/0x7e0 [ 782.387447][T12462] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 782.393728][T12462] ? __alloc_pages_slowpath+0x2900/0x2900 [ 782.399471][T12462] ? copy_process.part.0+0x1d35/0x79d0 [ 782.404974][T12462] ? lockdep_hardirqs_on+0x418/0x5d0 [ 782.410467][T12462] ? trace_hardirqs_on+0x67/0x230 [ 782.415545][T12462] ? kasan_check_read+0x11/0x20 [ 782.420460][T12462] copy_process.part.0+0x3e0/0x79d0 [ 782.425687][T12462] ? get_pid_task+0xc9/0x190 [ 782.430302][T12462] ? find_held_lock+0x35/0x130 [ 782.435096][T12462] ? get_pid_task+0xc9/0x190 [ 782.439754][T12462] ? __f_unlock_pos+0x19/0x20 [ 782.444462][T12462] ? find_held_lock+0x35/0x130 [ 782.449265][T12462] ? __cleanup_sighand+0x60/0x60 [ 782.454314][T12462] ? lock_downgrade+0x880/0x880 [ 782.459208][T12462] ? kasan_check_write+0x14/0x20 [ 782.464168][T12462] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 782.469751][T12462] _do_fork+0x257/0xfd0 [ 782.473947][T12462] ? fork_idle+0x1d0/0x1d0 [ 782.478416][T12462] ? fput+0x1b/0x20 [ 782.482344][T12462] ? ksys_write+0x166/0x1f0 [ 782.486887][T12462] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 782.493451][T12462] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 782.498946][T12462] ? do_syscall_64+0x26/0x610 [ 782.503670][T12462] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 782.509776][T12462] ? do_syscall_64+0x26/0x610 [ 782.514498][T12462] __x64_sys_clone+0xbf/0x150 [ 782.519346][T12462] do_syscall_64+0x103/0x610 [ 782.524017][T12462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 782.530115][T12462] RIP: 0033:0x458209 [ 782.534047][T12462] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 782.554040][T12462] RSP: 002b:00007fce6754cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 782.562510][T12462] RAX: ffffffffffffffda RBX: 00007fce6754cc90 RCX: 0000000000458209 [ 782.570517][T12462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 03:39:08 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x7fd, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x1, @vbi}) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x0, 0x0, {0x86, 0x30c, 0x303f, 0x7, 0x7, 0x4, 0x1, 0x2}}) 03:39:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8000) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) mlock(&(0x7f0000012000/0x4000)=nil, 0x4000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:08 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 782.578697][T12462] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 782.586702][T12462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6754d6d4 [ 782.594957][T12462] R13: 00000000004be519 R14: 00000000004cec60 R15: 0000000000000004 [ 782.642566][ C1] net_ratelimit: 20 callbacks suppressed [ 782.642575][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 782.654178][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 782.721937][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 782.727922][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:08 executing program 5: mmap$binder(&(0x7f0000012000/0x2000)=nil, 0x2000, 0xa, 0x20012, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000180)={0x15, 0x110, 0xfa00, {r1, 0xb2b4, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1ff}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x7}}}, 0x118) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000040)={0x6, {{0x2, 0x4e22, @broadcast}}}, 0x88) 03:39:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 782.803937][T12479] vhci_hcd: invalid port number 255 [ 782.826243][T12479] vhci_hcd: default hub control req: 0000 vff00 i00ff l65535 03:39:08 executing program 1 (fault-call:2 fault-nth:2): r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:08 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000880)="24000000120007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) [ 782.999606][T12525] FAULT_INJECTION: forcing a failure. [ 782.999606][T12525] name failslab, interval 1, probability 0, space 0, times 0 [ 783.056654][T12525] CPU: 0 PID: 12525 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 783.065729][T12525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.075802][T12525] Call Trace: [ 783.079113][T12525] dump_stack+0x172/0x1f0 [ 783.083468][T12525] should_fail.cold+0xa/0x15 [ 783.088079][T12525] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 783.093912][T12525] ? ___might_sleep+0x163/0x280 [ 783.093935][T12525] __should_failslab+0x121/0x190 [ 783.093959][T12525] should_failslab+0x9/0x14 [ 783.108240][T12525] kmem_cache_alloc+0x2b2/0x6f0 [ 783.108264][T12525] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 783.108287][T12525] ? __validate_process_creds+0x22d/0x380 [ 783.125078][T12525] prepare_creds+0x3e/0x3f0 [ 783.125099][T12525] copy_creds+0x7b/0x6c0 [ 783.125123][T12525] copy_process.part.0+0xb81/0x79d0 [ 783.125141][T12525] ? get_pid_task+0xc9/0x190 [ 783.125163][T12525] ? find_held_lock+0x35/0x130 [ 783.143675][T12525] ? get_pid_task+0xc9/0x190 [ 783.143698][T12525] ? __f_unlock_pos+0x19/0x20 [ 783.143714][T12525] ? find_held_lock+0x35/0x130 [ 783.143744][T12525] ? __cleanup_sighand+0x60/0x60 [ 783.143766][T12525] ? lock_downgrade+0x880/0x880 [ 783.172342][T12525] ? kasan_check_write+0x14/0x20 [ 783.177304][T12525] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 783.182889][T12525] _do_fork+0x257/0xfd0 [ 783.187083][T12525] ? fork_idle+0x1d0/0x1d0 [ 783.191517][T12525] ? fput+0x1b/0x20 [ 783.195342][T12525] ? ksys_write+0x166/0x1f0 [ 783.199857][T12525] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 783.205334][T12525] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 783.210786][T12525] ? do_syscall_64+0x26/0x610 [ 783.215480][T12525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.221567][T12525] ? do_syscall_64+0x26/0x610 [ 783.226242][T12525] __x64_sys_clone+0xbf/0x150 [ 783.230914][T12525] do_syscall_64+0x103/0x610 [ 783.235498][T12525] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.241391][T12525] RIP: 0033:0x458209 [ 783.245288][T12525] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.264907][T12525] RSP: 002b:00007fce6754cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 783.273334][T12525] RAX: ffffffffffffffda RBX: 00007fce6754cc90 RCX: 0000000000458209 [ 783.281298][T12525] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 783.289269][T12525] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 783.297245][T12525] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6754d6d4 [ 783.305242][T12525] R13: 00000000004be519 R14: 00000000004cec60 R15: 0000000000000004 03:39:08 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockname$packet(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1000000000000f, 0x3) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00']) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:39:08 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:08 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000040)=""/41) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:08 executing program 1 (fault-call:2 fault-nth:3): r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) [ 783.361914][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 783.367799][ C0] protocol 88fb is buggy, dev hsr_slave_1 03:39:08 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 783.454692][T12606] FAULT_INJECTION: forcing a failure. [ 783.454692][T12606] name failslab, interval 1, probability 0, space 0, times 0 [ 783.487829][T12606] CPU: 0 PID: 12606 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 783.496924][T12606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 783.507005][T12606] Call Trace: [ 783.510327][T12606] dump_stack+0x172/0x1f0 [ 783.514778][T12606] should_fail.cold+0xa/0x15 [ 783.519395][T12606] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 783.525243][T12606] ? ___might_sleep+0x163/0x280 [ 783.530110][T12606] __should_failslab+0x121/0x190 [ 783.535061][T12606] should_failslab+0x9/0x14 [ 783.535080][T12606] __kmalloc+0x2dc/0x740 [ 783.535096][T12606] ? refcount_inc_not_zero_checked+0x144/0x200 [ 783.535116][T12606] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 783.543871][T12606] ? security_prepare_creds+0x123/0x190 [ 783.543899][T12606] security_prepare_creds+0x123/0x190 [ 783.543922][T12606] prepare_creds+0x2f5/0x3f0 [ 783.543941][T12606] copy_creds+0x7b/0x6c0 [ 783.543965][T12606] copy_process.part.0+0xb81/0x79d0 [ 783.543984][T12606] ? get_pid_task+0xc9/0x190 [ 783.585523][T12606] ? find_held_lock+0x35/0x130 [ 783.585542][T12606] ? get_pid_task+0xc9/0x190 [ 783.585565][T12606] ? __f_unlock_pos+0x19/0x20 [ 783.594942][T12606] ? find_held_lock+0x35/0x130 [ 783.594969][T12606] ? __cleanup_sighand+0x60/0x60 [ 783.594983][T12606] ? lock_downgrade+0x880/0x880 [ 783.595009][T12606] ? kasan_check_write+0x14/0x20 [ 783.595025][T12606] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 783.595047][T12606] _do_fork+0x257/0xfd0 [ 783.629009][T12606] ? fork_idle+0x1d0/0x1d0 [ 783.633525][T12606] ? fput+0x1b/0x20 [ 783.637347][T12606] ? ksys_write+0x166/0x1f0 [ 783.641871][T12606] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 783.647379][T12606] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 783.652853][T12606] ? do_syscall_64+0x26/0x610 [ 783.657554][T12606] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.663639][T12606] ? do_syscall_64+0x26/0x610 [ 783.668336][T12606] __x64_sys_clone+0xbf/0x150 [ 783.673040][T12606] do_syscall_64+0x103/0x610 [ 783.677653][T12606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 783.683555][T12606] RIP: 0033:0x458209 03:39:08 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:09 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 783.687468][T12606] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 783.707095][T12606] RSP: 002b:00007fce6754cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 783.715530][T12606] RAX: ffffffffffffffda RBX: 00007fce6754cc90 RCX: 0000000000458209 [ 783.723521][T12606] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 783.731507][T12606] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 783.739503][T12606] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6754d6d4 [ 783.747490][T12606] R13: 00000000004be519 R14: 00000000004cec60 R15: 0000000000000004 03:39:09 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:09 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x20000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000010) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000000)=0x8001, 0x4) bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [], @local}}, 0x1c) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00') sendfile(r2, r5, 0x0, 0x1000003) [ 783.891344][T12731] vhci_hcd: default hub control req: ffff v00ff i0000 l32 [ 784.001928][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 784.007776][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 784.013675][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 784.019472][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:09 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockname$packet(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1000000000000f, 0x3) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00']) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:39:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r1, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r5 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r2, 0x26) r7 = dup2(r6, r5) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{r5, 0x220}, {r6, 0x4}, {r4, 0x40}, {r3, 0x4}, {r0, 0x2210}, {r2, 0x4001}, {r3, 0x2}, {r5, 0x1}], 0x8, &(0x7f0000000540)={r8, r9+10000000}, &(0x7f0000000580), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) r10 = accept4$inet6(r7, &(0x7f00000005c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000640)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000680)={0x80}, 0x1) ioctl$KDADDIO(r7, 0x4b34, 0x50) 03:39:09 executing program 1 (fault-call:2 fault-nth:4): r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:09 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:09 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:09 executing program 5: mkdir(&(0x7f0000000040)='\x00', 0x0) r0 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80, 0x200000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x3ff, 0x0, 0x2, 0x7f}) recvmmsg(r1, &(0x7f0000007b80)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/242, 0xf2}, {&(0x7f0000001340)=""/217, 0xd9}, {&(0x7f0000001440)=""/122, 0x7a}, {&(0x7f00000014c0)=""/87, 0x57}, {&(0x7f0000001540)=""/4096, 0x1000}], 0x6}, 0x5}, {{&(0x7f00000025c0)=@xdp, 0x80, &(0x7f0000003b80)=[{&(0x7f0000002640)=""/254, 0xfe}, {&(0x7f0000002740)=""/154, 0x9a}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/115, 0x73}, {&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000003880)=""/204, 0xcc}, {&(0x7f0000003980)=""/148, 0x94}, {&(0x7f0000003a40)=""/189, 0xbd}, {&(0x7f0000003b00)=""/95, 0x5f}], 0x9, &(0x7f0000003c40)=""/205, 0xcd}, 0x5}, {{&(0x7f0000003d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004180)=[{&(0x7f0000003dc0)=""/207, 0xcf}, {&(0x7f0000003ec0)=""/96, 0x60}, {&(0x7f0000003f40)=""/159, 0x9f}, {&(0x7f0000004000)=""/214, 0xd6}, {&(0x7f0000004100)=""/71, 0x47}], 0x5}, 0x80000001}, {{&(0x7f0000004200)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f0000004540)=[{&(0x7f0000004280)=""/57, 0x39}, {&(0x7f00000042c0)=""/156, 0x9c}, {&(0x7f0000004380)=""/229, 0xe5}, {&(0x7f0000004480)=""/123, 0x7b}, {&(0x7f0000004500)=""/52, 0x34}], 0x5}, 0x1}, {{&(0x7f00000045c0)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000004640)=""/232, 0xe8}, {&(0x7f0000004740)=""/102, 0x66}, {&(0x7f00000047c0)=""/209, 0xd1}], 0x3, &(0x7f0000004900)=""/83, 0x53}, 0xc00000000000}, {{&(0x7f0000004980)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000004a00)=""/4096, 0x1000}, {&(0x7f0000005a00)=""/192, 0xc0}], 0x2, &(0x7f0000005b00)=""/216, 0xd8}, 0x4}, {{&(0x7f0000005c00)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005c80)=""/247, 0xf7}, {&(0x7f0000005d80)=""/114, 0x72}], 0x2, &(0x7f0000005e40)=""/31, 0x1f}}, {{&(0x7f0000005e80)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005f00)=""/60, 0x3c}, {&(0x7f0000005f40)=""/210, 0xd2}, {&(0x7f0000006040)=""/188, 0xbc}, {&(0x7f0000006100)=""/59, 0x3b}, {&(0x7f0000006140)=""/74, 0x4a}], 0x5}, 0x10001}, {{&(0x7f0000006240)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000064c0)=[{&(0x7f00000062c0)=""/54, 0x36}, {&(0x7f0000006300)=""/182, 0xb6}, {&(0x7f00000063c0)=""/253, 0xfd}], 0x3, &(0x7f0000006500)=""/96, 0x60}, 0xffffffff}, {{&(0x7f0000006580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000007a00)=[{&(0x7f0000006600)=""/196, 0xc4}, {&(0x7f0000006700)=""/162, 0xa2}, {&(0x7f00000067c0)=""/4096, 0x1000}, {&(0x7f00000077c0)=""/105, 0x69}, {&(0x7f0000007840)=""/12, 0xc}, {&(0x7f0000007880)=""/64, 0x40}, {&(0x7f00000078c0)=""/156, 0x9c}, {&(0x7f0000007980)=""/103, 0x67}], 0x8, &(0x7f0000007a80)=""/217, 0xd9}, 0xffffffff}], 0xa, 0x122, &(0x7f0000007e00)={0x77359400}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000007e40)={'vcan0\x00', r3}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x1ff, r2}) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x801, &(0x7f0000000040)) [ 784.243756][T12748] FAULT_INJECTION: forcing a failure. [ 784.243756][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 784.260865][T12749] vhci_hcd: default hub control req: ffff v00ff i0000 l32 [ 784.300011][T12748] CPU: 1 PID: 12748 Comm: syz-executor.1 Not tainted 5.1.0-rc1-next-20190321 #8 [ 784.309114][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 784.319197][T12748] Call Trace: [ 784.322526][T12748] dump_stack+0x172/0x1f0 [ 784.327078][T12748] should_fail.cold+0xa/0x15 [ 784.331713][T12748] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 784.337573][T12748] ? ___might_sleep+0x163/0x280 [ 784.342486][T12748] __should_failslab+0x121/0x190 [ 784.347458][T12748] should_failslab+0x9/0x14 [ 784.351989][T12748] kmem_cache_alloc+0x2b2/0x6f0 [ 784.356879][T12748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 784.363161][T12748] __delayacct_tsk_init+0x20/0x80 [ 784.368218][T12748] copy_process.part.0+0x3562/0x79d0 [ 784.373538][T12748] ? get_pid_task+0xc9/0x190 [ 784.378153][T12748] ? find_held_lock+0x35/0x130 [ 784.382939][T12748] ? get_pid_task+0xc9/0x190 [ 784.387558][T12748] ? __f_unlock_pos+0x19/0x20 [ 784.392257][T12748] ? find_held_lock+0x35/0x130 [ 784.397053][T12748] ? __cleanup_sighand+0x60/0x60 [ 784.402013][T12748] ? lock_downgrade+0x880/0x880 [ 784.406908][T12748] ? kasan_check_write+0x14/0x20 [ 784.411881][T12748] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 784.417461][T12748] _do_fork+0x257/0xfd0 [ 784.421646][T12748] ? fork_idle+0x1d0/0x1d0 [ 784.426080][T12748] ? fput+0x1b/0x20 [ 784.429906][T12748] ? ksys_write+0x166/0x1f0 [ 784.434428][T12748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.439911][T12748] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 784.445390][T12748] ? do_syscall_64+0x26/0x610 [ 784.450080][T12748] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.456162][T12748] ? do_syscall_64+0x26/0x610 [ 784.460870][T12748] __x64_sys_clone+0xbf/0x150 [ 784.465568][T12748] do_syscall_64+0x103/0x610 [ 784.470188][T12748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 784.476433][T12748] RIP: 0033:0x458209 [ 784.480338][T12748] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 784.501038][T12748] RSP: 002b:00007fce6754cc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 784.509647][T12748] RAX: ffffffffffffffda RBX: 00007fce6754cc90 RCX: 0000000000458209 [ 784.517634][T12748] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.525617][T12748] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 784.533595][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce6754d6d4 [ 784.541571][T12748] R13: 00000000004be519 R14: 00000000004cec60 R15: 0000000000000004 03:39:10 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:10 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0xee, 0x4) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x223, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) open_by_handle_at(r0, &(0x7f0000000100)={0x4d, 0x1f, "d02376d0efc1b07f0e03f8507d8350409acb83bfdf883091c23f96b58b9a998002dcbe13c7251eda085fed08da636a4fca510c968ad60d8f054a72a575cafa2e4fb6bbc56d"}, 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0xb4) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000240)='system_u:object_r:null_device_t:s0\x00', 0x23, 0x1) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0xb800, 0x18, 0xfa00, {0x640000, &(0x7f0000000440), 0x0, 0x0, [0x9c00]}}, 0xfef5) 03:39:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 784.680694][T12762] vhci_hcd: default hub control req: ffff v00ff i0000 l32 03:39:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:10 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(0x0, 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:10 executing program 0: pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockname$packet(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000009340)=[{{0xffffffffffffffff, 0x0, &(0x7f0000003280)=[{&(0x7f0000002180)=""/113, 0x71}, {&(0x7f0000002200)=""/66, 0x42}, {&(0x7f0000002280)=""/4096, 0x1000}], 0x3, &(0x7f00000032c0)=""/224, 0xe0, 0x9}, 0xfffffffffffffffe}, {{0x0, 0x0, &(0x7f0000003480)=[{0x0}], 0x1, 0x0, 0x0, 0x2}}, {{&(0x7f0000003980)=@ipx, 0x80, 0x0, 0x0, &(0x7f0000005c40)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000006c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000006ec0)=[{&(0x7f0000006cc0)=""/230, 0xe6}, {&(0x7f0000006dc0)=""/66, 0x42}], 0x2, &(0x7f0000006f00)=""/245, 0xf5, 0x1000}, 0x5}], 0x4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1000000000000f, 0x3) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000240)=0x44) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000180)={0x0, 'bond_slave_1\x00'}, 0x18) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x1000, &(0x7f00000009c0)=ANY=[@ANYBLOB=',smackfsroot=/dev/input/mice\x00,dont_hash,obj_role=/dev/input/mice#,appraise,\x00']) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000ff8000), 0x0) socket$alg(0x26, 0x5, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) 03:39:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:10 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:10 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(0x0, 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:10 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:39:10 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:10 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x121000, 0x0) ioctl$int_in(r0, 0x8000008004500b, &(0x7f00000004c0)) 03:39:11 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000140)={0x4, 0x8, 0xfa00, {r2, 0x3}}, 0x10) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000040)={0x2}) 03:39:11 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(0x0, 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:11 executing program 5: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={[{@part={'part'}}, {@force='force'}, {@gid={'gid'}}, {@nls={'nls', 0x3d, 'iso8859-15'}}]}) r0 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x60bb, 0xfffffffffffffffa, 0x6, 0x7fffffff}, 0x10) 03:39:11 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f25"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 785.816159][T12997] hfsplus: unable to find HFS+ superblock 03:39:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x8, 0x0, 0x0, 0x0, 0x0) 03:39:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x16, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x4c}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x40000, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0xf, 0x2}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) [ 785.923567][T12997] hfsplus: unable to find HFS+ superblock 03:39:11 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000d43000)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mount(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x3080, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@md0='/dev/md0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='hfsplus\x00', 0x0, &(0x7f00000001c0)='ramfs\x00') mount(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x5010, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x2) 03:39:11 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:11 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc40123c123d3188b070") r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40, 0x32) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') poll(&(0x7f0000000040)=[{r0, 0x28}, {r2}, {r0, 0x2101}], 0x3, 0xb3c) 03:39:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x11, 0x0, 0x0, 0x0, 0x0) 03:39:12 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:12 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 03:39:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:12 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @multicast1}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @local}, 0x80, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)='syzkaller0\x00', 0xa2c2, 0x1}) r1 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @random="078e6c8398ea"}, 0x8, {0x2, 0x0, @multicast2}, 'yam0\x00'}) 03:39:12 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:12 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$addseals(r1, 0x409, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={0x0, 0x0, 0x110}, 0x10) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9a, 0x80) ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0) fcntl$addseals(r2, 0x409, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, 0x0) r4 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0xe000, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r4) fdatasync(r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') clone(0x2102001ff9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r3, 0x8010743f, &(0x7f0000000140)) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0x18, 0x1, 0x0, {0x80}}, 0x18) 03:39:12 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x2, 0x0, 0xfffffffffffffffb, 0x8000, 0x2, 0x4}}, 0x8) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000500)=0x20) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000540)={0x2, 0x6, 0x80, 0x8000}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1fd) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:39:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x1100, 0x0, 0x0, 0x0, 0x0) 03:39:12 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f000090a000/0x3000)=nil], 0x0, 0x0, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r2, 0x808, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x30}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x58}}, 0x10) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000280)=@netrom={'nr', 0x0}, 0x10) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) ioctl$KDSKBLED(r3, 0x4b65, 0x5) clone(0xfffffffffffffffe, 0x0, 0x0, 0x0, &(0x7f00000003c0)="deff7f000000000000c3c9f1aa6d8f1de96c2f19af5ce64e7ebef9b474feff24ab0a65779266514e6b28cb22563308fe04091c88ef8712f424d5a6064309ffbf08346e96b4f21106f31ffd0400000023f7eb54aa4d70c8d524cdf551c1fc006e66875090a8fd5990") read(r0, &(0x7f0000009f9c)=""/100, 0x64) 03:39:12 executing program 0: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x20) write$P9_RATTACH(r0, &(0x7f0000000200)={0x14, 0x69, 0x1, {0xc0, 0x3, 0x1}}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c766572730fb9ffd1696f6e3d3970323030302c6163636573733d616e912c70726976706f72742c6163636573733d", @ANYRESDEC=0x0, @ANYBLOB=',cache=fscache,\x00']) [ 787.499051][T13594] 9p: Unknown access argument an‘ 03:39:12 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:12 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 787.557609][T13634] [ 787.559998][T13634] ===================================================== [ 787.566732][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 787.566954][T13634] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 787.581560][T13634] 5.1.0-rc1-next-20190321 #8 Not tainted [ 787.586645][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 787.587201][T13634] ----------------------------------------------------- [ 787.587217][T13634] syz-executor.5/13634 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 787.587223][T13634] 00000000838195f7 (&ctx->fault_pending_wqh){+.+.}, at: userfaultfd_read+0x540/0x1940 [ 787.587268][T13634] [ 787.587268][T13634] and this task is already holding: [ 787.630018][T13634] 000000001b8b912c (&ctx->fd_wqh){....}, at: userfaultfd_read+0x27a/0x1940 [ 787.638641][T13634] which would create a new lock dependency: [ 787.646957][T13634] (&ctx->fd_wqh){....} -> (&ctx->fault_pending_wqh){+.+.} [ 787.654560][T13634] [ 787.654560][T13634] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 787.666004][T13634] (&(&ctx->ctx_lock)->rlock){..-.} [ 787.666032][T13634] [ 787.666032][T13634] ... which became SOFTIRQ-irq-safe at: [ 787.682468][T13634] lock_acquire+0x16f/0x3f0 [ 787.688243][T13634] _raw_spin_lock_irq+0x60/0x80 [ 787.695809][T13634] free_ioctx_users+0x2d/0x4a0 [ 787.706459][T13634] percpu_ref_switch_to_atomic_rcu+0x3e7/0x520 [ 787.729919][T13634] rcu_core+0x928/0x1390 [ 787.742174][T13634] __do_softirq+0x266/0x95a [ 787.749191][T13634] run_ksoftirqd+0x8e/0x110 [ 787.753910][T13634] smpboot_thread_fn+0x6ab/0xa10 [ 787.758998][T13634] kthread+0x357/0x430 [ 787.763351][T13634] ret_from_fork+0x3a/0x50 [ 787.767986][T13634] [ 787.767986][T13634] to a SOFTIRQ-irq-unsafe lock: [ 787.775269][T13634] (&ctx->fault_pending_wqh){+.+.} [ 787.775283][T13634] [ 787.775283][T13634] ... which became SOFTIRQ-irq-unsafe at: [ 787.775387][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 787.780411][T13634] ... [ 787.780438][T13634] lock_acquire+0x16f/0x3f0 [ 787.780452][T13634] _raw_spin_lock+0x2f/0x40 03:39:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c6"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:13 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 787.780467][T13634] userfaultfd_release+0x48e/0x6d0 [ 787.780488][T13634] __fput+0x2e5/0x8d0 [ 787.798753][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 787.802846][T13634] ____fput+0x16/0x20 [ 787.802873][T13634] task_work_run+0x14a/0x1c0 [ 787.802889][T13634] exit_to_usermode_loop+0x273/0x2c0 [ 787.802899][T13634] do_syscall_64+0x52d/0x610 [ 787.802914][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 787.802919][T13634] [ 787.802919][T13634] other info that might help us debug this: 03:39:13 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 787.802919][T13634] [ 787.802923][T13634] Chain exists of: [ 787.802923][T13634] &(&ctx->ctx_lock)->rlock --> &ctx->fd_wqh --> &ctx->fault_pending_wqh [ 787.802923][T13634] [ 787.802940][T13634] Possible interrupt unsafe locking scenario: [ 787.802940][T13634] [ 787.802943][T13634] CPU0 CPU1 [ 787.802946][T13634] ---- ---- [ 787.802947][T13634] lock(&ctx->fault_pending_wqh); [ 787.894604][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 787.895391][T13634] local_irq_disable(); [ 787.895394][T13634] lock(&(&ctx->ctx_lock)->rlock); [ 787.895404][T13634] lock(&ctx->fd_wqh); [ 787.895411][T13634] [ 787.895413][T13634] lock(&(&ctx->ctx_lock)->rlock); [ 787.895420][T13634] [ 787.895420][T13634] *** DEADLOCK *** [ 787.895420][T13634] [ 787.895431][T13634] 1 lock held by syz-executor.5/13634: [ 787.895444][T13634] #0: 000000001b8b912c (&ctx->fd_wqh){....}, at: userfaultfd_read+0x27a/0x1940 [ 787.900636][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 787.907691][T13634] [ 787.907691][T13634] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 787.907710][T13634] -> (&(&ctx->ctx_lock)->rlock){..-.} { [ 787.907723][T13634] IN-SOFTIRQ-W at: [ 787.907748][T13634] lock_acquire+0x16f/0x3f0 [ 787.907764][T13634] _raw_spin_lock_irq+0x60/0x80 [ 787.907780][T13634] free_ioctx_users+0x2d/0x4a0 [ 787.907797][T13634] percpu_ref_switch_to_atomic_rcu+0x3e7/0x520 [ 787.907823][T13634] rcu_core+0x928/0x1390 [ 787.961160][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 787.964882][T13634] __do_softirq+0x266/0x95a [ 787.964896][T13634] run_ksoftirqd+0x8e/0x110 [ 787.964909][T13634] smpboot_thread_fn+0x6ab/0xa10 [ 787.964921][T13634] kthread+0x357/0x430 [ 787.964936][T13634] ret_from_fork+0x3a/0x50 [ 787.964941][T13634] INITIAL USE at: [ 787.964958][T13634] lock_acquire+0x16f/0x3f0 [ 787.964969][T13634] _raw_spin_lock_irq+0x60/0x80 [ 787.964986][T13634] free_ioctx_users+0x2d/0x4a0 [ 787.965013][T13634] percpu_ref_switch_to_atomic_rcu+0x3e7/0x520 [ 788.058910][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 788.067712][T13634] rcu_core+0x928/0x1390 [ 788.067726][T13634] __do_softirq+0x266/0x95a [ 788.067738][T13634] run_ksoftirqd+0x8e/0x110 [ 788.067750][T13634] smpboot_thread_fn+0x6ab/0xa10 [ 788.067767][T13634] kthread+0x357/0x430 [ 788.067782][T13634] ret_from_fork+0x3a/0x50 [ 788.067785][T13634] } [ 788.067800][T13634] ... key at: [] __key.52765+0x0/0x40 [ 788.067804][T13634] ... acquired at: [ 788.067817][T13634] lock_acquire+0x16f/0x3f0 [ 788.067828][T13634] _raw_spin_lock+0x2f/0x40 [ 788.067871][T13634] io_submit_one+0xe35/0x1cf0 [ 788.265481][T13634] __x64_sys_io_submit+0x1bd/0x580 [ 788.270862][T13634] do_syscall_64+0x103/0x610 [ 788.275714][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.281765][T13634] [ 788.284082][T13634] -> (&ctx->fd_wqh){....} { [ 788.288572][T13634] INITIAL USE at: [ 788.292457][T13634] lock_acquire+0x16f/0x3f0 [ 788.298511][T13634] _raw_spin_lock_irqsave+0x95/0xcd [ 788.305258][T13634] __wake_up_common_lock+0xc7/0x190 [ 788.312020][T13634] __wake_up+0xe/0x10 [ 788.317568][T13634] userfaultfd_release+0x4ec/0x6d0 [ 788.324226][T13634] __fput+0x2e5/0x8d0 [ 788.329753][T13634] ____fput+0x16/0x20 [ 788.335290][T13634] task_work_run+0x14a/0x1c0 [ 788.341441][T13634] exit_to_usermode_loop+0x273/0x2c0 [ 788.348276][T13634] do_syscall_64+0x52d/0x610 [ 788.354417][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.361859][T13634] } [ 788.364373][T13634] ... key at: [] __key.45578+0x0/0x40 [ 788.371828][T13634] ... acquired at: [ 788.375639][T13634] __lock_acquire+0x239c/0x3fb0 [ 788.380663][T13634] lock_acquire+0x16f/0x3f0 [ 788.385356][T13634] _raw_spin_lock+0x2f/0x40 [ 788.390025][T13634] userfaultfd_read+0x540/0x1940 [ 788.395127][T13634] __vfs_read+0x8d/0x110 [ 788.399536][T13634] vfs_read+0x194/0x3e0 [ 788.403869][T13634] ksys_read+0xea/0x1f0 [ 788.408204][T13634] __x64_sys_read+0x73/0xb0 [ 788.412884][T13634] do_syscall_64+0x103/0x610 [ 788.417644][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.423712][T13634] [ 788.426021][T13634] [ 788.426021][T13634] the dependencies between the lock to be acquired [ 788.426026][T13634] and SOFTIRQ-irq-unsafe lock: [ 788.439615][T13634] -> (&ctx->fault_pending_wqh){+.+.} { [ 788.445070][T13634] HARDIRQ-ON-W at: [ 788.449052][T13634] lock_acquire+0x16f/0x3f0 [ 788.455900][T13634] _raw_spin_lock+0x2f/0x40 [ 788.462052][T13634] userfaultfd_release+0x48e/0x6d0 [ 788.468804][T13634] __fput+0x2e5/0x8d0 [ 788.474426][T13634] ____fput+0x16/0x20 [ 788.480047][T13634] task_work_run+0x14a/0x1c0 [ 788.486423][T13634] exit_to_usermode_loop+0x273/0x2c0 [ 788.493464][T13634] do_syscall_64+0x52d/0x610 [ 788.500864][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.508481][T13634] SOFTIRQ-ON-W at: [ 788.512461][T13634] lock_acquire+0x16f/0x3f0 [ 788.518607][T13634] _raw_spin_lock+0x2f/0x40 [ 788.524767][T13634] userfaultfd_release+0x48e/0x6d0 [ 788.531540][T13634] __fput+0x2e5/0x8d0 [ 788.537523][T13634] ____fput+0x16/0x20 [ 788.543157][T13634] task_work_run+0x14a/0x1c0 [ 788.549424][T13634] exit_to_usermode_loop+0x273/0x2c0 [ 788.556449][T13634] do_syscall_64+0x52d/0x610 [ 788.562692][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.570225][T13634] INITIAL USE at: [ 788.574135][T13634] lock_acquire+0x16f/0x3f0 [ 788.580219][T13634] _raw_spin_lock+0x2f/0x40 [ 788.586297][T13634] userfaultfd_release+0x48e/0x6d0 [ 788.594113][T13634] __fput+0x2e5/0x8d0 [ 788.599681][T13634] ____fput+0x16/0x20 [ 788.605335][T13634] task_work_run+0x14a/0x1c0 [ 788.611497][T13634] exit_to_usermode_loop+0x273/0x2c0 [ 788.618346][T13634] do_syscall_64+0x52d/0x610 [ 788.624494][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.631934][T13634] } [ 788.634456][T13634] ... key at: [] __key.45575+0x0/0x40 [ 788.641903][T13634] ... acquired at: [ 788.645725][T13634] __lock_acquire+0x239c/0x3fb0 [ 788.650767][T13634] lock_acquire+0x16f/0x3f0 [ 788.655450][T13634] _raw_spin_lock+0x2f/0x40 [ 788.660116][T13634] userfaultfd_read+0x540/0x1940 [ 788.665216][T13634] __vfs_read+0x8d/0x110 [ 788.669705][T13634] vfs_read+0x194/0x3e0 [ 788.674020][T13634] ksys_read+0xea/0x1f0 [ 788.678339][T13634] __x64_sys_read+0x73/0xb0 [ 788.683007][T13634] do_syscall_64+0x103/0x610 [ 788.687788][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 788.693836][T13634] [ 788.696153][T13634] [ 788.696153][T13634] stack backtrace: [ 788.702035][T13634] CPU: 1 PID: 13634 Comm: syz-executor.5 Not tainted 5.1.0-rc1-next-20190321 #8 [ 788.711034][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 788.721078][T13634] Call Trace: [ 788.724393][T13634] dump_stack+0x172/0x1f0 [ 788.728732][T13634] check_usage.cold+0x60f/0x940 [ 788.733578][T13634] ? debug_smp_processor_id+0x3c/0x280 [ 788.739074][T13634] ? check_usage_forwards+0x360/0x360 [ 788.744465][T13634] ? lockdep_hardirqs_on+0x418/0x5d0 [ 788.750102][T13634] ? trace_hardirqs_on+0x67/0x230 [ 788.755136][T13634] ? kasan_check_read+0x11/0x20 [ 788.759997][T13634] ? finish_task_switch+0x146/0x780 [ 788.765206][T13634] ? finish_task_switch+0x118/0x780 [ 788.770406][T13634] ? __switch_to_asm+0x34/0x70 [ 788.775164][T13634] ? __switch_to_asm+0x40/0x70 [ 788.780153][T13634] check_prev_add.constprop.0+0x2e3/0x23c0 [ 788.785961][T13634] ? check_prev_add.constprop.0+0x2e3/0x23c0 [ 788.791973][T13634] ? check_usage+0x570/0x570 [ 788.796566][T13634] ? try_to_wake_up+0xc6/0x1000 [ 788.801442][T13634] ? preempt_schedule+0x4b/0x60 [ 788.806289][T13634] ? kasan_check_write+0x14/0x20 [ 788.811232][T13634] ? is_dynamic_key+0x1c0/0x1c0 [ 788.816098][T13634] ? __lockdep_reset_lock+0x450/0x450 [ 788.821466][T13634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 788.827705][T13634] ? find_first_zero_bit+0x9a/0xc0 [ 788.832827][T13634] __lock_acquire+0x239c/0x3fb0 [ 788.837850][T13634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 788.844122][T13634] ? debug_smp_processor_id+0x3c/0x280 [ 788.849581][T13634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 788.863899][T13634] ? mark_held_locks+0xf0/0xf0 [ 788.883667][T13634] lock_acquire+0x16f/0x3f0 [ 788.917535][T13634] ? userfaultfd_read+0x540/0x1940 [ 788.934988][T13634] _raw_spin_lock+0x2f/0x40 [ 788.950110][T13634] ? userfaultfd_read+0x540/0x1940 [ 788.973283][T13634] userfaultfd_read+0x540/0x1940 [ 789.004765][T13634] ? userfaultfd_event_wait_completion+0xa50/0xa50 [ 789.017454][T13634] ? fsnotify+0xbc0/0xbc0 [ 789.022169][T13634] ? fsnotify_first_mark+0x210/0x210 [ 789.027439][T13634] ? __fget+0x381/0x550 [ 789.031581][T13634] ? wake_up_q+0xf0/0xf0 [ 789.035840][T13634] ? security_file_permission+0x94/0x380 [ 789.041482][T13634] __vfs_read+0x8d/0x110 [ 789.045731][T13634] ? userfaultfd_event_wait_completion+0xa50/0xa50 [ 789.052216][T13634] vfs_read+0x194/0x3e0 [ 789.056364][T13634] ksys_read+0xea/0x1f0 [ 789.060513][T13634] ? kernel_write+0x120/0x120 [ 789.065188][T13634] ? do_syscall_64+0x26/0x610 [ 789.069866][T13634] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.075920][T13634] ? do_syscall_64+0x26/0x610 [ 789.080581][T13634] __x64_sys_read+0x73/0xb0 [ 789.085109][T13634] do_syscall_64+0x103/0x610 [ 789.089703][T13634] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 789.095601][T13634] RIP: 0033:0x458209 [ 789.099476][T13634] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 789.119066][T13634] RSP: 002b:00007f938cdfdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.127461][T13634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458209 [ 789.135413][T13634] RDX: 0000000000000064 RSI: 0000000020009f9c RDI: 0000000000000004 [ 789.143395][T13634] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 789.151349][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f938cdfe6d4 [ 789.159310][T13634] R13: 00000000004c3cbe R14: 00000000004d87e8 R15: 00000000ffffffff [ 789.168132][ C1] net_ratelimit: 20 callbacks suppressed [ 789.168139][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 789.172547][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 789.173859][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 789.179554][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 789.185396][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 789.202575][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 789.204230][ T3878] kobject: 'loop1' (0000000006285825): kobject_uevent_env [ 789.208401][ C1] protocol 88fb is buggy, dev hsr_slave_0 03:39:13 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c67600"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 789.221079][ T3878] kobject: 'loop1' (0000000006285825): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 789.221326][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 789.237574][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 789.243403][ C1] protocol 88fb is buggy, dev hsr_slave_1 03:39:14 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000040)=@generic={0x3, 0x0, 0x1}) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) r6 = msgget$private(0x0, 0x410) msgctl$IPC_RMID(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:14 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) 03:39:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x1f00, 0x0, 0x0, 0x0, 0x0) [ 789.380184][ T3878] kobject: 'loop3' (00000000d5c9ac5c): kobject_uevent_env [ 789.402324][ T3878] kobject: 'loop3' (00000000d5c9ac5c): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:39:14 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:39:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c67600"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:14 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:14 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, 0x0) [ 789.443735][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 789.450981][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 789.466497][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 789.477986][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 789.512197][ T3878] kobject: 'loop5' (00000000abde64f7): kobject_uevent_env [ 789.549923][ T3878] kobject: 'loop5' (00000000abde64f7): fill_kobj_path: path = '/devices/virtual/block/loop5' 03:39:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x3f00, 0x0, 0x0, 0x0, 0x0) 03:39:15 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, 0x0) 03:39:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="cb2b9b5255175d43fca389e340fe96132329bdfbaa11c5521288697c83a9f28c7ee1d8df70f2c6849d443d5bc274a1f15763852f82112b1d574dd383021e45f811e5acbf81b764dc4babfdf01646fa6053eb4f61d21f7985af9b2fca6ac5cdf9b99e6223658145b3617346c52b23c3f8aa5de006f4758611d17206000000ddff000030d59dc700c87aa001f8fffffffffffffe7fbc75ddf39ce5106f0031f17ce46095af00d10e3a8db945026d98cd7149bc4db5db0aefb5e6c1a8dc3868a5c79df28f873f98e2bddce125001f8dbd7592b90b3a99e50000000000000000000000000000be803f2d7a95720b65f63c701a4445766ac2f6da6937fb837b620995562d7da1332bd3c09335a296de2b722fe258d443402c1f7c733266751f539245c63ebdf13b942970fba24afe32fabde909b45be9aa923d7dfb873b44b22f750f5c83ca9572897788b28b93b43cb9ff040b99ff8b0bf187ff7a90856b8e2334266ae18e450600000000000000f873976f2ce3dee326be25f3203e74e23d29e52b800b22c149fbb03696debb9333cdeb4fa6b5ff80df42beb052bd76d916ea183d0f68d9306414e03ea311cd2b1594c087c02543f973e4ec256db290272eff75436001dc654cc102627a7666a348dcbd9a33b13fe12b7316299c74cb41f3972055397fd29836feea5d4e70c30000008d0b00a04e8565a83f567f72640b9904a8b19a990224409cf0827e460650b0734232e7b4e88d0ebb36f6000000000000c0fe5d322bd0b8bab901800000ffa5f00f790b888320df17fa477e63d0df8e9291f67141939596dfae272d14bb65a63ebf2ef41197160c276cf04f876ff7e985765d4c2bfbafc847d69e9b05a84179fcc9673ccec213cc5238432bf8f843f4b72f0d1cd14d3851510f488e3171e33319e075f8f471cc08e2e114eeb554e40bc3b71dfd2d6bcb221b3bbb3bcfdf631a66abdafe0581db15cd638fa2a0bf282ed83375f00248f872e30000000000000000000000000000000033955d7fcb34c6b40f60414aba524c8e20bfbbcd33fc649ac5683167a1d9f85f6e78194065bc715515d21c5ac5289ad51460b8530dbbfcd2e394a5d6185a992f34cf34964caea9ba5991377061d386cd5efb91570ce834113a9471b28b5ee421a42b0516333b4f06b82a7a1e8152b5cbc0c712dce67f253972c67600"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 789.643091][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 789.650342][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 789.701662][ T3878] kobject: 'loop1' (0000000006285825): kobject_uevent_env [ 789.755630][ T3878] kobject: 'loop1' (0000000006285825): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:39:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 789.851070][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 789.858429][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 789.873037][ T3878] kobject: 'loop5' (00000000abde64f7): kobject_uevent_env [ 789.884595][ T3878] kobject: 'loop5' (00000000abde64f7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 789.965152][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 789.973287][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:39:15 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000740)={0xc, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) wait4(r0, &(0x7f0000000400), 0xa, &(0x7f0000000640)) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r4 = syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x8000, 0x200000) memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000380)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x80000, r4}) r6 = dup2(r5, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) timerfd_gettime(r1, &(0x7f0000000040)) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000500)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x2) ioctl$KDADDIO(r6, 0x4b34, 0x50) 03:39:15 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, 0x0) 03:39:15 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:39:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x4000, 0x0, 0x0, 0x0, 0x0) 03:39:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 790.262480][ T3878] kobject: 'loop3' (00000000d5c9ac5c): kobject_uevent_env 03:39:15 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 790.344845][ T3878] kobject: 'loop3' (00000000d5c9ac5c): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:39:15 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) 03:39:15 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:16 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 790.558213][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 790.598330][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 790.610424][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 790.617836][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:39:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:16 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x740005, 0xffffffff7ff0bdbe}) [ 790.721014][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 790.733074][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 790.760258][ T3878] kobject: 'loop5' (00000000abde64f7): kobject_uevent_env [ 790.775504][ T3878] kobject: 'loop5' (00000000abde64f7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 790.811689][ T3878] kobject: 'loop1' (0000000006285825): kobject_uevent_env [ 790.830591][ T3878] kobject: 'loop1' (0000000006285825): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 790.848915][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 790.857763][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:39:16 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) socket$pppoe(0x18, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x5) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) r5 = dup2(r4, r3) setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r5, 0x4b34, 0x50) 03:39:16 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:39:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x20010, 0x0, 0x0, 0x0, 0x0) 03:39:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r10 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r10, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r11 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r11, 0x0, 0xd, &(0x7f0000000500)=""/219) 03:39:16 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff7ff0bdbe}) 03:39:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) [ 791.225648][ T3878] kobject: 'loop3' (00000000d5c9ac5c): kobject_uevent_env [ 791.240841][ T3878] kobject: 'loop3' (00000000d5c9ac5c): fill_kobj_path: path = '/devices/virtual/block/loop3' 03:39:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r10 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r10, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) semget$private(0x0, 0x2000000000000001, 0x0) 03:39:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:16 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r10 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r10, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) semget$private(0x0, 0x2000000000000001, 0x0) [ 791.477906][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 791.496784][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' 03:39:16 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff7ff0bdbe}) [ 791.583494][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 791.594075][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' 03:39:17 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000003c0)='/dev/bus/usb/00#/00#\x00', 0xb, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) clone(0x20200, 0x0, 0x0, 0x0, 0x0) 03:39:17 executing program 2: syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x80000000003, 0x1000000000000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0xffffffff7ff0bdbe}) [ 791.643770][ T3878] kobject: 'loop1' (0000000006285825): kobject_uevent_env [ 791.651124][ T3878] kobject: 'loop1' (0000000006285825): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 791.683532][ T3878] kobject: 'loop2' (00000000eee18f46): kobject_uevent_env [ 791.728377][ T3878] kobject: 'loop2' (00000000eee18f46): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 791.760195][ T3878] kobject: 'loop4' (000000009f23ab14): kobject_uevent_env [ 791.779841][ T3878] kobject: 'loop4' (000000009f23ab14): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 791.814427][ T3878] kobject: 'loop5' (00000000abde64f7): kobject_uevent_env [ 791.823414][ T3878] kobject: 'loop5' (00000000abde64f7): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 791.838159][ T3878] kobject: 'loop1' (0000000006285825): kobject_uevent_env [ 791.853096][ T3878] kobject: 'loop1' (0000000006285825): fill_kobj_path: path = '/devices/virtual/block/loop1' 03:39:17 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1, 0x0) ptrace$pokeuser(0x6, r0, 0x7d, 0x5) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000340)={0x2, @output={0x1000, 0x1, {0x1d5, 0x8001}, 0x7, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000480)="660f561bc4c2493e0b0f00dc66baf80cb8f41b6087ef66bafc0cb000ee0f01f70ff29700300000660f3881ac40af087917260f381e96a30000009a0fe000002d000f09", 0x43}], 0x1, 0x0, 0x0, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0xffffffff, &(0x7f0000000500)=0x4) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000001c0)={0x403f, 0x9, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x6685) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000440)={0xf5ec}) r3 = memfd_create(&(0x7f0000000600)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) mmap$binder(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000004, 0x84010, r1, 0x26) getresuid(&(0x7f00000005c0)=0x0, &(0x7f0000000640), &(0x7f0000000680)) r5 = getgid() fstat(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {}, [{0x2, 0x5, r4}], {0x4, 0x5}, [{0x8, 0x3, r5}, {0x8, 0x1, r6}, {0x8, 0x0, r7}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x2) r8 = dup2(0xffffffffffffffff, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$KDADDIO(r8, 0x4b34, 0x50) 03:39:17 executing program 5: openat$kvm(0xffffffffffffff9c, &(0x7f0000000580)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) 03:39:17 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), 0xe) r11 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r11, 0xffffffdffbffffa4, &(0x7f0000000000)) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x82) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRESHEX=r5], &(0x7f00000003c0)=0x1) r12 = semget$private(0x0, 0x2000000000000001, 0x0) semctl$GETALL(r12, 0x0, 0xd, &(0x7f0000000500)=""/219) ioctl$SG_GET_PACK_ID(r10, 0x227c, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0), 0x8) 03:39:17 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x4000000000002, 0x4, 0x100000001, 0x7, 0x0, 0x1}, 0x2c) mmap(&(0x7f000029d000/0x200000)=nil, 0x200000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000040)="24000000210025f0a85f65021e0dbce9020400020004000182a9000c08000100194a7df5", 0x24) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x200009, 0x0) r2 = accept4$ax25(r1, &(0x7f0000000040)={{}, [@default, @netrom, @remote, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000240)=0xfffffffffffffd8d, 0x80800) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}, 0x4000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x8080e, 0x10057) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x11, &(0x7f0000000100)='nodeveth1[[nodev\x00', 0xffffffffffffffff}, 0xffffffffffffffd8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0xffffffffffffff1c, &(0x7f00000004c0)='bdevcgroup\xc2\x00', r6}, 0x30) r7 = fcntl$getown(r2, 0x9) getpgid(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000300)=0x6, 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00', 0x2}, 0x18) ioctl(r9, 0x800000000008982, &(0x7f0000000080)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) mount(&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x2, 0x0) ioctl$TIOCNXCL(r8, 0x540d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0,